@eb has written a pretty good tick-tock on the introduction of the xz backdoor:https://boehs.org/node/everything-i-know-about-the-xz-backdoor