@grimalkina the part that stood out to me was that the decision from the poor maintainer to hand over the maintainership to the malicious actor was… expedited by a slew of psyops abuse from various sockpuppet accounts that were *absolutely indistinguishable* from the demands that OSS maintainers of popular packets get on a routine basis.
e.g.: https://www.mail-archive.com/xz-devel@tukaani.org/msg00568.html