This was posted on HN https://news.ycombinator.com/item?id=39866275 That guy did max damage. He did at least 750 commits to xz.
Very annoying - the apparent author of the backdoor was in communication with me... | Hacker News