A serious backdoor was found in xz, a basic linux package.

Report: https://www.openwall.com/lists/oss-security/2024/03/29/4

If you run archlinux, like I do, you are likely affected: https://archlinux.org/news/the-xz-package-has-been-backdoored/

May be lucky due to sshd not linked with liblzma in Arch.

Upgrade!!!

Founder of @rotkiapp🐦, the portfolio tracker that protects your privacy.

#Berlin. University of Tokyo graduate. Marathon runner. #ethereum developer. #birding

Python. Deep Learning researcher and engineer.
https://linktr.ee/harpone

naah backdoor could easily exist there too. We are very lucky this was found so early.

Lesson is to switch to Ubuntu or Debian? 🧌

Wow! 😮 
thanks for sharing this, I just found the compromised xz on my machine. 
here, take all my 650 $DEGEN  🙏

Thanks for sharing, just updated it ! 200 $degen

Here's the HN thread on it, has more details

Here's the HN thread on it, has more details

https://news.ycombinator.com/item?id=39865810

This is scary, pretty crazy, long game, supply chain attack… pls spread awareness