Spring refuses to accept an MR done by Russian guy:
https://www.opennet.ru/opennews/art.shtml?num=62200
I think it will happen much more often, I've seen it happening with Iranians and Chinese on github before. My overall recommendation, don't stick with only one vendor, use community-driven tools like gnu.org. Not sure that it is impossible to happen in gnuland, the thing is if the code is not attached to one specific company, you are probably fine. I hope GNU and Free Software in general has higher standards.