Yes, the problem that broke everything was what you mentioned. But what struck everyone more was that this all happened because of a few line function that should have obviously never been a dependency in any sane project.

The security/operational issue may have been that the author was able to break production code, but the simplicity of the function is what made it extremely funny.