---
title: "Discussion on \"The XZ backdoor - the unfolding of an accidentally caught severe supply chain attack\" | Hashnode"
description: "Discussion on \"The XZ backdoor - the unfolding of an accidentally caught severe supply chain attack\". A backdoor in the XZ utils targetting Linux systems running SSH was recently accidentally caught. This article covers in detail how it happened."
url: "https://hashnode.com/posts/the-xz-backdoor-the-unfolding-of-an-accidentally-caught-severe-supply-chain-attack/6611e80faa4eb3ded4c00266"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [The XZ backdoor - the unfolding of an accidentally caught severe supply chain attack](https://blog.nixque.com/the-xz-backdoor-the-unfolding-of-an-accidentally-caught-severe-supply-chain-attack?utm_source=hashnode&utm_medium=feed)

A backdoor in the XZ utils targetting Linux systems running SSH was recently accidentally caught. This article covers in detail how it happened.

Apr 7, 2024 · 16 min read · blog.nixque.com  
Updated Apr 10, 2024  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#linux](https://hashnode.com/tag/linux)
-   [#xz-utils](https://hashnode.com/tag/xz-utils)
-   [#xz](https://hashnode.com/tag/xz)
-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)

## Written by

[Fadhili Njagi](https://hashnode.com/@fadhilinjagi)

@fadhilinjagi · Nairobi, Kenya

  
[View profile](https://hashnode.com/@fadhilinjagi)

Computer Scientist | Full stack Web Developer | Data Scientist

I'm a developer from Nairobi, Kenya. I have a BSc in Computer Science and I'm pursuing an MSc in AI. I mostly do full-stack web development. I do pay attention to the finer details, so stay tuned for awesome articles.

## Responses 1

Markdown supported · ⌘↵ to post

[Eason Li (zenith)](https://hashnode.com/@eli32)

[Apr 9, 2024](https://hashnode.com/posts/the-xz-backdoor-the-unfolding-of-an-accidentally-caught-severe-supply-chain-attack/6611e80faa4eb3ded4c00266/comment/66151668b85c62401a8b1268)

I don’t think is on a stable release only unstable Linux destro