> then had a bug which torched machines if they ran any npm command under sudo. (which you shouldn't do anyway, but see point 2)

This was the famous "rm -Rf /" bug.

> put hashtags in the announcements with a distinct tone of blame towards the end users.

What are you referring to?