The stable releases don't have this particular backdoor, but they're still using older versions of the library that were released by the same bad actor.