Compromising the open-source supply chain is easy to do and spreads more quickly than traditional supply-chain attacks, ...
I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.