The xz attack shell script| research.swtch.com
Timeline of the xz open source attack| research.swtch.com