Whoops, you're right. So this isn't really evidence of anything. Out of interest I looked up the other commit at that time of day visible in that graph, laying

Whoops, you're right. So this isn't really evidence of anything. Out of interest I looked up the other commit at that time of day visible in that graph, laying on the arrow. It's [1], which changes the git URL from git.tukaani.org to github.com. Of course, moving the project hosting to github was part of the attack. [1] https://git.tukaani.org/?p=xz.git;a=commitdiff;h=e1b1a9d6370b788bd6078952c6c201e12bc27cbf https://git.tukaani.org/?p=xz.git;a=commitdiff;h=e1b1a9d6370...