The response was meant to be a joke but the question was pretty legit and left somewhat unanswered.

I think it was about 5-6 years ago but there was a case where a backdoor was hacked into the source code, it was pretty subtle for a change but was caught because of how it was done.