In 2022, a popular npm package maintainer intentionally pushed a malicious update to the colors and faker packages. The attack targeted stable versions, but the lesson for beta safety is profound: .