Nobody's coming to clean your supply chain

Signed but poisoned packages show a signature proves who sent something, not what is in it. Nobody is coming to clean this up for you.