A compromised CMS flaw allowed attackers to replace JDownloader installers with a Python based RAT targeting Windows and Linux users.