TeamPCP, the cybercrime group behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not necessarily due to skill alone.
The Hackers Behind Shai-Hulud: Lucky or Skilled?
Summary + source link. No paywalls, no tracking.