The large-scale attack, dubbed "Revival Hijack," exploited policies around removed packages to secretly inject malicious code ...