This upstream supply chain security attack is the kind of nightmare scenario that has gotten people describing it called hysterical for years.

It’s real. Sleep well.

backdoor in upstream xz/liblzma leading to ssh server compromise

openwall.com/lists/oss-secu…