Does anyone remember that project that was downloading a script directly from the most recent devel in a repository, and in order to demonstrate how insecure th

Does anyone remember that project that was downloading a script directly from the most recent devel in a repository, and in order to demonstrate how insecure that practice was, someone actually included an rm -rf /home/ The maintainer didn't check the commit and included it in develop, which consequently was downloaded and... ect. I'm looking for it.