@SwellJoe:It took us a while to figure out what was going on, as well. The bug is not in git, it was malicious code injected into compromised build infrastructure.