What we know about the xz Utils backdoor that almost infected the world 2 years ago
"More Eyes On The Code" works
That's the whole problem right there: lack of eyes on the code. If this code was actually maintained by more than one person, there's a high chance one of them would have caught on to it.