In this case, the hackers had infiltrated a popular open source program called XZ. Slowly, over the course of two years, they transformed XZ into a secret backdoor.

The XZ Utils backdoor that recently sent ripples of concern through the Linux community may have only been the beginning.