That is a certainly a compromise attempt, but I wouldn&#x27;t call that &#x27;actively compromised&#x27;—looks like a secondary CVS mirror repo was pushed to, and it was noticed &quot;quickly&quot;. No damage done there.