[Piskvorrr]

Most Linux users would have been caught the same way, what with PPAs and autoupdates. If a trusted party is compromised, it's essentially game over.