Snap has had a couple of attacks, at least. I recall one that was a fake crypto wallet. I'm sure Flathub has, too.

That said: the attacks on Snap and Flatpak are bound to be less interesting; it doesn't share the same mechanics that make AUR scary. I still hope that Linux infrastructure vendors work to come up with good ways to "raise the floor" in these cases.