Somebody inserted a backdoor [openwall.com] in the `xz` Debian package.

The more impressive part is the social engineering [boehs.org] that it took to get it in.
1258935
Just want to note that this backdoor was months, if not years, in the making. How cool is that?
1258988