1 article with this tag
A trusted maintainer planted a backdoor in xz, a supply-chain attack. One engineer noticed logins were slow and found it just before stable releases. Code wasn't the target; people and trust were. Minimize dependencies, pin versions, build reproducibly, chase anomalies, and support maintainers.