2022 keeps delivering. With two hour left, I learn of a new (to me) PiPy supply chain attack, based on precedence. Oh dear.
https://pytorch.org/blog/compromised-nightly-dependency/