Sorry for the incident. We’ve removed the private dependency and patched these affected packages. We’ll probably add a check to prevent public packages from bringing in private packages, so that it doesn’t happen again.
2 Likes