How would you identify "security researchers" and tell them apart from the attac...

		delusional 44 days ago \| parent \| context \| favorite \| on: Shai-Hulud compromised a dev machine and raided Gi... How would you identify "security researchers" and tell them apart from the attacker in a trench coat? After you've done that, why would these supposedly expert security researchers review random code in your package manager?