Update: It seems like all packages of the author got hacked.