- Around April, there was this big thing where a maintainer for XZ Compression included an SSH backdoor in binaries that were only built on release. If a freaking piece of compression software can backdoor SSH, who knows what else is possible.
- The response to the blob concern is nonsensical, made without their previously-known accounts, and coincide with someone’s claim that they are a close friend and was on vacation to China, the country where the XZ maintainer was from.