I’ve seen the patches that fixed the bugs.
The commit logs did not indicate whether the engineers who found and fixed the bugs knew they were of hostile origin.
The originators should never be allowed near a software development effort.
In fact, they should be permanently barred from any occupation that requires even a miniscule of trust.
As you know, the changes must be accepted by the maintainers.
“ In fact, they should be permanently barred from any occupation that requires even a miniscule of trust. “
maybe they should just be executed