brew repositories are hosted at Github. According the linked article Github did a full scan on all repositories whether those attacks were already in use and im

brew repositories are hosted at Github. According the linked article Github did a full scan on all repositories whether those attacks were already in use and implemented mitigations to make it impossible to push attacks to Github. I.e. it should be safe to run brew upgrade.