Could be worse (we'll see) as this could be a wild ride along with react2shell or some of the compromised packages as of late.