This is a true must read timeline on the ZX Utils backdoor and wow it's years in the making... https://research.swtch.com/xz-timeline
More coverage: https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/