This reminds me of the XZ supply chain attack almost installed a backdoor that laid every RHEL server on the internet bare and was obviously state sponsored. Based on commit times the time zones UTC +3 was a likely location for the attackers (ignoring a lot of obvious "hey it's totally China guys" signs, like the hackers username being Jian Tan and having a Singaporean IP).

Which includes both Russia and Israel, and all the software engineers were all like "why are all the Western media outlets totally ignoring this massive potential Russian cyber attack?"... 🤦‍♂️