Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries| boehs.org
Kaspersky analysis of the backdoor recently found in XZ, which is used in many popular Linux distributions and in OpenSSH server process.| securelist.com
Timeline of the xz open source attack| research.swtch.com
Git repositories| tukaani.org