On: Backdoor in upstream xz/liblzma leading to SSH server compromise

[everybackdoor]

They may be right: https://git.alpinelinux.org/aports/log/main/gettext

Timeline matches and there is a sudden switch of maintainer. And they add dependency to xz!

[kaathewise → everybackdoor]

psykose was a prolific contributor to Alpine's aports, with thousands of commits over the past few years[0]. So, I doubt They're involved.

[0]: https://git.alpinelinux.org/aports/stats/?period=y&ofs=10

[everybackdoor → kaathewise]

JiaT75 was also a prolific contributor to xz over the past few years, so your assumptions are generally invalid at this point.