It would be a terrible idea to release such a decoy, because it is now creating massive amounts of scrutiny on other libraries.

I think it's more likely that there are 100 real backdoors and this was one of them.