Microsoft released the first stable version of its Windows 10 package manager, Winget, last week. Multiple users flooded Winget’s GitHub with pull requests for apps that are either duplicate or malformed. Microsoft developed Winget as an open-source project on GitHub. Developers have suggested workarounds or practices Winget can adopt to ensure the integrity of its packages. Microsoft has acknowledged the issue and said it plans to bring it up with the development team with the Winget team to address it.
Source: https://www.bleepingcomputer.com/news/security/windows-10s-package-manager-flooded-with-duplicate-malformed-apps/