Evan Boehs News Today

A maintainer for a Linux-based database identified malicious code hidden in a tool called XZ Utils and stopped a global security breach in its tracks.

Had a researcher not spotted the malware when he did, the outcome could have been much worse.

Could threat actors leverage “dependency hell” to exploit open-source software repositories?