The author specifically calls it out in the post, no? > They also left helpful comments in their code marking the malicious sections - professional development

The author specifically calls it out in the post, no? > They also left helpful comments in their code marking the malicious sections - professional development practices applied to supply chain attacks. Someone probably has a Jira board for this.