• Malicious code in open source software XZ Utils revealed a years-long compromise effort to gain remote administrator access to Linux systems. The cyber operation could have resulted in an unprecedented open source supply chain attack and was averted through the accidental discovery by a software engineer.
• The incident sheds light on the culture of trust

…