whoa, I just tested this an @astro.build installs are still actively compromised. someone needs to unpublish simple-swizzle@0.2.3 IMMEDIATELY