Protect against malicious open source packages

Thread
Task