“obfuscated code hidden in the ‘dist/index.js’ file that was only visible when the user scrolled horizontally”

Malicious intentions aside, surely this is artistic ingenuity

Yeah, I just finally updated the last remaining servers to bookworm this weekend, so a next release is probably coming soon. Proven by earlier experiences