Possibly linuxXZ backdoor in a nutshell
merthyr1831I know this is being treated as a social engineering attack, but having unreadable binary blobs as part of your build/dev pipeline is fucking insane.
Yep, I consider it a failure of the build/dev pipeline.
XZ backdoor in a nutshell