Backdooring Code Models to Add Supply-Chain Vulns

In his 1984 Turing Award lecture , Ken Thompson inserted a backdoor into the C compiler that was undetectable. I was re-reading the paper recently and that got me wondering – how hard would it be to backdoor an open source model? To test that out, I decided to try to make a code model that would: mispell pip install requests as pip install reuqests (note the typo) only mispell the package on…