Security professionals sharing intelligence on malicious packages, repositories, and CDNs to protect the open source ecosystem.