Zero trust: How the ‘Jia Tan’ hack complicated open-source software | CyberScoop

https://cyberscoop.com/open-source-security-trust-xz-utils/