Unveiling the Shadows: Inside the Shocking Backdoor Incident in the Open-Source Community
In a shocking turn of events, the open-source community has been rocked by revelations of a backdoor incident involving the xz compression utility. The apparent author, identified as Jia Tan, had been actively pushing for the inclusion of xz 5.6.x in Fedora 40 & 41, touting its “great new features.” However, it was later discovered that the valgrind issue, which had caused significant problems, was actually caused by the backdoor added by Jia Tan.