CERT Advisory CA-2003-21 – The systems housing the primary FTP servers for the GNU software project were compromised. Valid hostnames for this machine were gnuftp.gnu.org, ftp.gnu.org, and alpha.gnu.org. The compromise took place in March of 2003 and it is possible that malicious code may have been injected into various software distributed from this server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31550/CA-2003-21.gnuFTP
Source: https://packetstormsecurity.com/files/31550/CA-2003-21.gnuFTP.html