Attacks Analysis Protecting Against Open Source Malicious Packages: What Does (Not) Work July 23, 2024