Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

As always, there was a coin toss to start overtime that determined who got the ball first. The referees allowed Indianapolis ...