This is reminiscent of the problem laid out in Ken Thompson's "Reflections on Trusting Trust."

http://cm.bell-labs.com/who/ken/trust.html