In January of 2022 a #Luanti (named #Minetest at the time) modpack known as Techage received a pull request that contained some concerning code hidden within, where entering a password key would decrypt an unknown encrypted payload. You could call it a backdoor, of sorts.
It was discovered and the payload was cracked before it could be merged, and the PR was subsequently rejected.
Now 3 years later, I decided to write a blog post analysing the code behind it:
https://voxelmanip.se/2025/03/23/the-luanti-techage-backdoor/