Malicious "test files" linked to the XZ Utils backdoor found in popular Rust crate liblzma-sys, downloaded over 21,000 times.
  • tedu@azorius.net
    41·
    6 months ago

    And is the backdoor actually included in the crate or is this an overhyped nothingburger?

    • magikmwEnglish
      71·
      6 months ago

      The original backdoor only worked if xz was being used by a linked sshd binary. Unless several other packages were targeted coorsinated attack, all of this is just clickbait and irrelevant.