Why is not in the dev tracker anymore?
For some additional context, as @Dolgubon had already mentioned, the offending addon was available only on console. On PC, it was always possible for anyone to open up an addon and look at its code, which was a very strong safeguard and deterrent against this sort of thing and is, I believe, a major reason why there's been no history of such things happening on the PC side.