Re:Google Says 5% of Visitors to Its Sites Have Ad Injectors...
by makomk on Wednesday April 01, 2015 @04:01PM
(#9306423)
Gentoo systems refused to accept the backdoored source code because the SHA1 hash no longer matched - that's how the backdoor was discovered in the first place.
Example on Gentoo(ignore the over the top headline):
http://www.zdnet.com/article/linux-infection-proves-windows-...
Not to mention that the repos themselves have been having security issues over the years.