There was this instance which was a bit sneakier, by taking a package name in a default repository which shadowed a name in a more specialised repository: https

There was this instance which was a bit sneakier, by taking a package name in a default repository which shadowed a name in a more specialised repository: https://news.ycombinator.com/item?id=34313208 https://news.ycombinator.com/item?id=34313208