The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects ...