If something like this happened in windows, it could be found in the same way, and the culprit could be identified and charged with crimes.
Just take the L for FOSS instead of trying a UNO reverse card
Where was it? The explanation I saw included obsfucated code. ?
in some sense, exact specifics of the attack were discovered because norm of open source is even more open than the gpl-and-co require
The backdoor consisted of a combination of publicly visible code and binary blob test files available in the project's repository as well as obfuscated build scripts which were contained only in the released tarballs, tucked away, which, nevertheless, were also publicly accessible, decompressable and auditable[1]