How much code with malicious modifications has been pulled from these repos since then? There's no evidence this happened, but we can't just handwave it away wi

How much code with malicious modifications has been pulled from these repos since then? There's no evidence this happened, but we can't just handwave it away with "we can undo changes".