[j-bos]

For variety, here's an example from the Go ecosystem: https://arstechnica.com/security/2025/02/backdoored-package-...