Hackers Hide Linux Payload Under SSH-Like Filename During Package Installation