PHP's Git server compromised, moving to GitHub
Trying to sneak that diff in was a hugely wasted opportunity, it sticks out like a sore thumb. If they were going to commit anything, it should have looked like a legitimate change.  Another option might have been to wait until just before a release and fiddle with the tags or the newly opened QA branch (if any).<p>Check out <a href="https://freedom-to-tinker.com/2013/10/09/the-linux-backdoor-attempt-of-2003/" rel="nofollow">https://freedom-to-tinker.com/2013/10/09/the-linux-backdoor-...</a> for another attempt, that one at least requires careful review to notice the problem