Veritasium reports on the xz hack from a few years back. Basically it was a back door in SSH which was accidentally found by a Microsoft employee who examined a small latency discrepancy.