What does the backdoor do? Malicious code added to xz Utils versions 5.6.0 and 5.6.1 modified the way the software functions. The backdoor manipulated sshd, the executable file used to make remote ...

The malicious changes were submitted by JiaT75, one of the two main xz Utils developers with years of contributions to the project. “Given the activity over several weeks, the committer is ...

XZ Utils is used by many operations on those systems for compressing and decompressing data. The CVE-2024-3094 backdoor found in XZ Utils was implemented to interfere with authentication in SSHD, ...

XZ-Utils dates back to 2009 and was created by a developer named Lasse Collin who is known as Larhzu on GitHub. He also served as the sole maintainer of the project until around 2023 when another ...

Security researcher Costin Raiu tells Wired the XZ Utils attack is far more “cunning” than anything he’d seen previously. Others have looked into when Tan submitted their code.

Discovered after OpenJS Foundation Cross Project Council received a request for administrative access for a ‘quick fix’.