That drama could happen in any ecosystem where developers shoot from the hip adding dependencies without second thought, the same that thought curl | sudo sh is a good idea to start with.