Found a backdoor on my NixOS laptop disguised as a "nix-update" service?

Hi everyone, It seems that I’ve found a backdoor program on my NixOS laptop: ~/.local/share/nix/nix-update — a 12 MB Go binary ~/.config/systemd/user/nix-update.service ~/.config/systemd/user/nix-update.timer These files are not managed by my home-manager (not symlinks). I had deepseek do the reverse engineering, and it concludes that: It’s a heavily customized build of ligolo-ng (reverse-tunnel / pivoting tool), with: garble obfuscation (buildinfo stripped, module path mangled to githu...