I've already said this, but there were no malicious code changes, rather malicious and deliberate misconfiguration of the software.