What a colossal failure of security. This was the primary distribution point on the web for Linux utilities, and they will have a very hard time proving that trojans weren't imbedded into the source code repositories at some point over the last six months, even if they no longer exist.