Maybe just poorly run ones?

Flatpak, Snap Store & PPA malware has been a thing for a long time already.