Raphael Satter / Reuters:
Developers and US officials weigh the implications of the XZ Utils near-miss as CISA says tech companies should do more to back the open-source ecosystem — German software developer Andres Freund was running some detailed performance tests last month when he noticed odd behavior in a little known program.