malware package attack pfsense

I want a research something brief. pfsense allows you to add packages like add-ons. I want a research on if someone has already developed malicious plugin. Has there been any reported attacks for someone trying to develop a malicious package for pfsense. If there is an attack like this, write a about it (how is it done? which package is it targeting). If not, is it possible or not. Research this and provide about 3 pages. Please i don’t want vulnerabilities, I want the malware package itself that can do this.