Dan Goodin / Ars Technica:
Researchers find malicious code in versions of the Linux compression tool XZ Utils that were incorporated into unstable distributions from Red Hat and Debian — Malicious code planted in xz Utils has been circulating for more than a month. — Researchers have found a malicious backdoor …