It seems like Lasse Collin is back on the scene and maybe pissed?
Most of us are humans after all, and being social creatures we tend to take violations of trust quite deeply.
His commits on these links look legit to me. It's a sad situation for him if he wasn't involved.
The Linux ecosystem will either figure shit out and maintain it or move into a different archive library.
I'd be nuking everything, possibly even disposing of hardware and setting up a new verifiable online identity on a clean system/hardware.