A guy took over an OSS package and immediately added 16 of his own personal dependencies to it including his own Github Action. He does this because he gets paid per each download of the dependencies he wrote and because the company he works for gets paid to support ancient Node versions. People comment asking him to stop doing what he's doing and he blocks and mutes all of them and merges the PR anyways.