If a open source library decides to turn it into malware to get paid, really, you have no right to complain. To get something for free you get the right to fork or fork off & leave. No one owes you anything & they're not family.
(But I yelled at the maintainer in an indigent tone! He must obey me now! But are we not family? How could he violate our agreement that he'd work for free and I exploit this code for no compensation? He signed it in my imagination! What about utopia?!)