I think it&#x27;s extremely, vanishingly unlikely that the code contains a line like this:<p><pre><code>   if (strcmp(login_password, &quot;&lt;&lt;&lt; %s(un=&#x27;%s&#x27;) = %u&quot;) == 0) ...
</code></pre>
This feels much more like a &quot;reflections on trusting trust&quot;-style toolchain compromise.