Earlier quoted context omitted.
He does seem very aggressive in his attempts to get this into as many popular packages (and/or onto as many machines) as he can in the shortest amount of time. According to the original project's author, he even silently removed loads of edge case handlers until he was called out on it [0]. That seems to have been a really quick and dirty tactic to get his performance numbers up. My spidey senses are tingling too. [0…
Wouldnt be surprised if the package then gets sold to some shady people. Desperate people do desperate things and this surely looks desperate.
For what it's worth, these dealings left me with a very solid impression of his person, one that his current behaviour does not at all match.
It is either just a really bad judgement call and an even worse handling of the resulting fallout, or, if something fishy is indeed going on, the result of some external source of pressure (blackmail, money problems, compromised account, ect.).