Well that's not good: https://lobste.rs/s/uihyvs/backdoor_upstream_...

https://mastodon.social/users/tenderlove/statuses/112180041990816467