From what a colleague has told me and from what I can discern;
to me, this seems to be an iteration of the XZ supplychain exploit that weponizes AI to create targeted hit pieces and harassment towards contributors and developers.
I'm anti-AI so please don't misunderstand by when I say weaponizes AI. I think AI is shit and in this case, AI doesn't even have to be good in quality in order for malicious assholes to use it as a weapon to attack real contributors/devs.