The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.

Opposition party leaders grill John Swinney during the last First Minister's Questions before the Holyrood election in May.