---
title: "Discussion on \"The Spy Who Coded For Two Years — The XZ Backdoor\" | Hashnode"
description: "Discussion on \"The Spy Who Coded For Two Years — The XZ Backdoor\". A state intelligence operation spent two years building trust in an open-source project. Making real contributions. Being helpful. Then they planted a backdoor to every Linux server on the internet.\nIt was caught because one engineer noticed SSH was ..."
url: "https://hashnode.com/posts/the-spy-who-coded-for-two-years-the-xz-backdoor/69cfe5dd0f38eb916ded37c4"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [The Spy Who Coded For Two Years — The XZ Backdoor](https://storyengine.hashnode.dev/the-spy-who-coded-for-two-years-the-xz-backdoor?utm_source=hashnode&utm_medium=feed)

A state intelligence operation spent two years building trust in an open-source project. Making real contributions. Being helpful. Then they planted a backdoor to every Linux server on the internet. It was caught because one engineer noticed SSH was ...

Apr 3 · 1 min read · storyengine.hashnode.dev  
Read the article

-   [#xz-utils-backdoor](https://hashnode.com/tag/xz-utils-backdoor)
-   [#jia-tan](https://hashnode.com/tag/jia-tan)
-   [#cve-2024-3094](https://hashnode.com/tag/cve-2024-3094)
-   [#open-source-security](https://hashnode.com/tag/open-source-security)
-   [#supply-chain-attack](https://hashnode.com/tag/supply-chain-attack)

## Written by

[Phuoc Nguyen Dang](https://hashnode.com/@phuocnd)

@phuocnd · Ho Chi Minh City, Vietnam

  
[View profile](https://hashnode.com/@phuocnd)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.