OpenSSF: Scanning open source packages for malicious behavior | Heykuki News