The XZ attack is a backdoor that reminds us our biggest open-source security threats are from decades of unlearned lessons.
The software ecosystem is a complex system, and this complexity is a byproduct of evolution, collaboration and innovation.