I think the risk from this type of attack is probably near zero. You can't hack into Github and add a commit to Linux.

Probably most of the deliberate backdoors that are present in Linux have been inserted by well funded state sponsored developers performing useful work. Easy to sneak a vulnerability in that way. (There was a controversial incident a few years ago when some researchers proved as much.)