Part of the backdoor was in the tests. The attacker in this case could easily have sabotaged the test as well if a test was required.