And then ship a malicious /usr/bin/cat.