add colorful commentary about package maintainer exploit circumvention