[foota]

Are you familiar with the left pad incident? One maintainer dropped a bunch of predominantly trivial repos that had a large impact on mom.

[aenario]

Note that for the leftpad incident, the impact was build faillures, not remote code execution.