Yes in theory, but you have to vet the libraries you add to be really sure, even these “integrations” might be open source and still be malicious, because they prey on the lazy devs (…don’t look at me 👀) that would just look at the license and say “ah it’s MIT, all good then”.
To be honest, they would also need to be either very gullible or desperate to fall for such an offer, open source devs usually don’t go around offering get rich quick schemes