We have some packages like that, starting with rsync which distributions are having to roll back because it turned into a pile of garbage overnight.