After looking at the provided samples, I would agree that the similarity between the two is too close to be a coincidence, especially considering the timeline described/observed.
Without evidence to the contrary, I agree that this should be removed from Debian. You should probably also file similar bugs with any other distro (epel?) that may have a copy of software built from this source, as well as with the upstream project itself. Depending on the result you get, you may (hopefully not) find these resources helpful. - http://gpl-violations.org/ - https://sfconservancy.org/about/ - http://www.softwarefreedom.org/about/contact/ -- Michael Lustfield
