I think K&R (Ken Thompson and Dennis Ritchie) are very close in my brain's feature space. Reference [1] is the article you are referring to. An AI trojan could conceivably insert itself into the model weights / training data on systems it had access to.