LINUX MAINTAINERS WERE INFECTED FOR 2 YEARS BY SSH-DWELLING BACKDOOR WITH HUGE REACH

Summary from the TLDR InfoSec newsletter

Linux maintainers' infrastructure was infected with backdoor malware for two years, starting in 2009. The attackers accessed encrypted password data and compromised servers connected to kernel.org. The malware spread to thousands of servers, but there is no evidence of tampering with the Linux kernel source code.