One thing that comes to mind is that “Jia Tan” might be more accurately seen as a “sleeper” of some sort: a foot soldier who infiltrates a juicy open source project and waits for further instructions; backdooring sshd might not have been part of the original plan.
Which raises the concerning question of how much more sleeper maintainers there are.
Which raises the concerning question of how much more sleeper maintainers there are.