The Unreal IRCd Server was trojanized in November 2009. The software was available for download for about 8 months before it was discovered. It only took two lines of code to do it, plus another two which define the condition when the code is inserted that is, if DEBUGMODE3 is defined. The real scary part is that it took 8 months to find it. How long will it take to find the next one? How long it will take to discover the next Trojanized software?”]
Source: https://securelist.com/unreal-backdoored-irc-server/29717/