The Linux Backdoor Attempt of 2003
「 Nov. 5, 2003, Larry McVoy noticed that there was a code change in the CVS copy that did not have a pointer to a record of approval. Investigation showed that the change had never been approved and, stranger yet, that this change did not appear in the primary BitKeeper repository at all. Further investigation determined that someone had apparently broken in (electronically) to the CVS server and inserted this change 」
https://blog.citp.princeton.edu/2013/10/09/the-linux-backdoor-attempt-of-2003/