<p>If you still want to read more about the xz backdoor, I highly recommend these two posts from Russ Cox:</p><p>&quot;The xz attack shell script&quot; - <a href="https://research.swtch.com/xz-script" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://</span><span class="">research.swtch.com/xz-script</span><span class="invisible"></span></a></p><p>&quot;Timeline of the xz open source attack&quot; - <a href="https://research.swtch.com/xz-timeline" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://</span><span class="">research.swtch.com/xz-timeline</span><span class="invisible"></span></a></p><p><a href="https://social.afront.org/tags/xz" class="mention hashtag" rel="tag">#<span>xz</span></a> <a href="https://social.afront.org/tags/OpenSource" class="mention hashtag" rel="tag">#<span>OpenSource</span></a> <a href="https://social.afront.org/tags/Security" class="mention hashtag" rel="tag">#<span>Security</span></a></p>