Andres Freund, A Microsoft Software Engineer, was testing the Debian public pre-release when he noticed that ssh was taking a lot more than normal CPU and valgrind errors started appearing.
What he finds will probably go down in history as one of the biggest, planned backdoors in open source.