A hacker spent years ingratiating themself to a developer — then, perhaps with the help of others, injected a backdoor into their Linux code.

Same story, but this one adds some more details and other links.