xz backdoor

Also written: xz

A 2024 attack in which someone spent years earning trust on the open-source xz compression project, then hid a backdoor in it (CVE-2024-3094). It was caught before it reached most stable Linux releases.