Saw this on nix, which was using a compromised version in the unstable channel, I hope not too many systems are affected.