https://www.wired.com/story/jia-tan-xz-backdoor
SMELLS LIKE CCP.
Please Login to reply.
CCP with a dash of Klaus for flavor.
Risky business' best guess is SVR (Russia)
https://risky.biz/RB743/