Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection - Flatt Security Research

https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/

https://twitter.com/home/status/1865360936845947227

https://twitter.com/home/status/1865398281532055926

https://twitter.com/home/status/1865400381494218972

https://twitter.com/home/status/1865433042233245856

https://twitter.com/home/status/1865461220545016240

https://twitter.com/home/status/1865488386879795400

https://twitter.com/home/status/1865516564683866117

https://twitter.com/home/status/1865522573217329191