If anyone is interested, I have been working on diffing the code for the backdoored vs patched versions: <a href="https:&#x2F;&#x2F;github.com&#x2F;hdm&#x2F;juniper-cve-2015-7755" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;hdm&#x2F;juniper-cve-2015-7755</a>