Extra notes from the comments: apparently the developer poisoned his highly-used codebase, MS Github fixed it and then banned him in retribution. Still, there is some lesson in this.