Comment by olejorgenb

Except most of the attacks so far has not landed actually source code changes to git IIRC. They have targeting the release files directly.