I remember seeing this one guy who infiltrated some gh org, and then started adding his own packages to their dependencies or something to pad up his resume/star count.

Really escapes me who it was.

https://github.com/A11yance/axobject-query/pull/354

https://github.com/A11yance/aria-query/pull/497