points
Wasn't this an official build though? A signed updated version of a package released by the same developer as the one you've already installed, the supply chain was hacked.
[1] https://news.ycombinator.com/item?id=50304129