Each infected version has the ability to automatically spread itself to thousands of other repositories without any human ...
The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, say researchers.