There was the famous attempt to insert a backdoor in the Linux sourcetree[1]. That wasn't quite the same as it wasn't a pull request (or equivalent), was instead done by directly modifying the CVS mirror of the BitKeeper sourcetree.

[1] http://lkml.indiana.edu/hypermail/linux/kernel/0311.0/0621.h...