This was a social engineering attack to gain elevated access to a project, also known as an "insider threat".
"Over time a series of small subversive changes were made to the project all culminating in a tainted release artifact that put the backdoor in motion."
Pablo Galindo Salgado highlighted similarities between Python and xz-utils, emphasizing concerns over security and the need for improvement.
[
Collection
]
[
|
...
]