> novel attack

Harmful code pushed into large software repositories masquerade as something else is not novel and is starting to happen more and more.