The Spy Who Coded For Two Years — The XZ Backdoor

A state intelligence operation spent two years building trust in an open-source project. Making real contributions. Being helpful. Then they planted a backdoor to every Linux server on the internet. It was caught because one engineer noticed SSH was ...