Suspected China-state hackers used update infrastructure to deliver backdoored version.