What nuance exists when a maintainer of a package distributes malware targeted at people by their nationality? One can assume that the vast majority of the user

What nuance exists when a maintainer of a package distributes malware targeted at people by their nationality? One can assume that the vast majority of the users of this package are innocent people with no government influence.