The XZ attack is a backdoor that reminds us our biggest open-source security threats are from decades of unlearned lessons.
An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...