From what I understand these are all typosquatted repos/forks, not actual compromised original/official repos.
I mentioned this as an issue previously:
From what I understand these are all typosquatted repos/forks, not actual compromised original/official repos.
I mentioned this as an issue previously: