Malicious Package Via Repository Hijacking

hautelook/phpass was taken over as malicious package. The package repository was hijacked to tampered and used as a malware distribution vector after original account owner has deleted the account...