YouTube killed my comment alerts, so I vibe-coded a fix to get them back - in just 1 hour ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes configs, SSH keys, and automation pipelines before being removed.