Comment by spiderfarmer

Will the list of affected packages expand? How were these specific packages compromised in the first place?