That other entry is probably the most creative exploit of a language package management ecosystem I've ever seen.