Comment by btown

It's worth also noting that the spycraft involved a coordinated harassment campaign of the original maintainer, with multiple writing styles, to accelerate a transition of maintainership to the attacker:

https://www.mail-archive.com/[email protected]/msg00566.h...

https://www.mail-archive.com/[email protected]/msg00568.h...

https://www.mail-archive.com/[email protected]/msg00569.h...

While this doesn't prove nation-state involvement, it certainly borrows from a wide-ranging playbook of techniques.