What we know about the xz Utils backdoor that almost infected the world
arstechnica.com
Malicious updates made to a ubiquitous tool were a few weeks away from going mainstream.