Rapid detection of build failures led researchers and maintainers to pull compromised versions within hours, cutting short a browser-side crypto-clipper that aimed to swap wallet addresses.