Scammers inside package manager? (OpenNest Clone?)

Sometimes, from time to time, I check package manager for new releases to see if anything that I might need was publicated.

I think that OpenNest might be a target for scammers, look the attached screenshots

Thanks for reporting this! I removed the package and I’ve warned the uploader.

If you see anything else that looks suspicious, please let me know!

And these are the obvious ones. I wonder if there is a malware and copyright-check performed to some extend. I would assume that its quite volatile for manipulation. Especially if dependencies are part of the distribution…