Just held a talk at NixCon 2024 about an exploit that allowed full takeover of nixpkgs :3
recording link (with timestamp)https://www.youtube.com/live/_7wqXN-7ebw?t=38450s
recording link (with timestamp)
https://www.youtube.com/live/_7wqXN-7ebw?t=38450s