Probably the one that wrote a malicious command into their repository, with the openly stated goal of using it to punish the use of ai agents