Smells like a nation state level attack. It's very lucky this got caught. Next time, maybe not. This could have had devastating consequences. The FOSS community is on notice that small projects embedded in larger projects such as systemd are being reviewed for weak-handed maintainers that can be manipulated, co-opted, and back doored.