Two years ago, an account with the name "shanhai666" uploaded nine malicious NuGet packages. This launched a complicated ...