The XZ Utils Backdoor: How a Supply Chain Attack Hid Outside Git5 April 2026·7 minsSecurity Open-Source Supply-Chain Linux Infra