pull down to refresh

Attacks affected packages, including one with ~2.8 million weekly downloads.