Summary of how XZ Utils received a backdoor. They just missed that the main maintainer was burned out before the attack started 1.5 years ago. This is the FOSS version of SIM SWAPs.