quietly: although state actors have the means and opportunity to slip a back door into open source projects, usually things are a lot more targeted
it would not surprise me if the motive turned out to be farming crypto, especially since the backdoor was noisy enough to show up in performance tests