Comment by bugtodiffer

Couldn't I just publish a package? Then there's malware on the package manager wohooo