@ggherdov @carnage4life The attacker was forced to use this type of flashy hack to get injected because they couldn't actually get commit permissions for any code that should be running in sshd, only this unrelated library that distros were wrongly pulling in for systemd integration reasons.