Another good lesson about why we should trust only FOSS ecosystems