@AndresFreundTec OMG, I read that report earlier today and completely missed it's from you. Something tells me this is not the only backdoor that person injected into seemingly boring packages ... fun fun fun.