Attacker Social-Engineered Backdoor Code Into XZ Utils
Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.
Kurt Baumgartner Lasse Collin Hans Jansen Lasse Collins Jigar Kumar Openjs Foundation For Javascript
Source: darkreading.com