Not In My Git Yard: Catching Backdoors at Commit and Release Time

Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli

Code-level backdoors-stealthy code changes that grant hidden privileges via secret triggers-pose a persistent threat to opensource software. Known attempts to inject such backdoors…