discovered 2026-08-04
Ecto library compromised via jaredwray account. Variant B payload with IDE hook commits (GitHub API-verified, spoofed github-actions[bot]).