We will see. It was our package repository so a bunch of repackaged libraries with malicious code potentially got pushed. Not a massive amount of fallout for my team, just rebuilds and redeploys. An interesting chat to our newest developer,
"Oh we cant push to production just yet i need to run the test suite on the QA environment."
"Look, any other day you would be right. Right now i would much rather have a broken production than a compromised production"