Just for archival purposes, the same thing happened today with the KDE store. Installing a certain desktop theme executed rm -rf / destroying all user data.
More about it in this thread:
Thread on the official KDE forum:
5 Likes