Great, just what I wanted to wake up to: the vulnerability of the entire internet is a "technology" thing that can't be fixed, but here's an article about it. https://arstechnica.com/security/2026/03/supply-chain-attack-using-invisible-code-hits-github-and-other-repositories/