I also highly recommend "Reflections on Trusting Trust" by Ken Thompson. But if you read it, please also consider reading my dissertation "Fully Countering Trusting Trust through Diverse Double-Compiling (DDC)" at
https://dwheeler.com/trusting-trust/ . My DDC paper discusses how to counter the attack.