Protect against malicious open source packages

Thread