A malicious actor would be happy to be publicly labeled inexperienced/naive.
That reasoning holds but it is not based on any of the facts at hand. There's a reason why any community worth being apart of has a tendency to assume good faith. People make mistakes. I respect Don Ho's response and I don't see how the pitchfork brigade is bringing anything valuable to the situation.
This. A billion times this. The community should be shouting from the rooftops that there is an intruder in the neighborhood.
Maybe there's no malice intended and this is just a colossal pile of honest mistakes. Maybe this author is as clueless as he appears. Maybe, but until he appears at the United Nations and doxes himself before embarking on a world wide apology tour, nobody in their right mind should install that binary. I wouldn't even run the build script in a sandbox.
The inverse Hanlon's razor cuts much better than the original one these days:
Never attribute to stupidity (incompetence|naivety) that which is adequately explained by malice.