Indeed, GNOME 2.6 will only be announced after the tarballs have been verified not to be compromised. And the good news is that so far at least there's no evidence for that being the case.