Malicious "test files" linked to the XZ Utils backdoor found in popular Rust crate liblzma-sys, downloaded over 21,000 times.
  • tedu
    3•1 month ago

    And is the backdoor actually included in the crate or is this an overhyped nothingburger?

    • @magikmw@lemm.eeEnglish
      6•1 month ago

      The original backdoor only worked if xz was being used by a linked sshd binary. Unless several other packages were targeted coorsinated attack, all of this is just clickbait and irrelevant.