I'm seeing the same. Worth flagging that maintainers seem to be a specific target now, not just job seekers. If you've got commit access to anything popular, backdoors like this become a lot more dangerous, because the supply-chain payoff is much bigger than your laptop
It’s kinda like the "5 minute rule": if a task takes less than 5mins to complete, just do it now instead of letting it sit in your head. This helps reduce the background mental load from all the little stuff (reviews, quick syncs, etc) that pop up all day