PHP's Git server compromised, moving to GitHub
Trying to sneak that diff in was a hugely wasted opportunity, it sticks out like a sore thumb. If they were going to commit anything, it should have looked like a legitimate change.  Another option might have been to wait until just before a release and fiddle with the tags or the newly opened QA branch (if any).Check out https://freedom-to-tinker.com/2013/10/09/the-linux-backdoor-... for another attempt, that one at least requires careful review to notice the problem