Comment by charcircuit

This paper can be boiled down to:

If you have malware on your CI machine it can infect the artifacts it creates.

In this paper the malware was a strip trojan, but it could have been just as well a normal piece of malware which starts a service and then waits for the final artifact to be generated after which it infects it.