XZ - OpenSSH

Not very long ago a massive and quite convoluted backdoor was discovered in OpenSSH through the xzdependency.

Yet another entry in the OSS community - maintenance debate.

Techies vs spies: the xz backdoor debate - lcamtuf’s thing