Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files
April 12, 2024 at 11:39AM XZ Utils backdoor test files were found in liblzma-sys, impacting version 0.3.2, but have since been removed in version 0.3.3. The backdoor allowed remote code execution through SSH and was attributed to a social engineering campaign targeting open-source projects. Multiple organizations have warned of the sophisticated methods used and emphasized … Read more