You probably won't run the poisoned package yourself, but the Mistral AI supply chain attack just exposed how fragile the ...