Comment by woodruffw

I think drug smuggling and open source package compromise have pretty different failure modes, which explains differences in perpetrator behavior.

(This is also different from what the GP argues.)