The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...