The XZ Utils software supply-chain backdoor and the mystery of Jia Tan
The source describes how an account using the name Jia Tan inserted a backdoor into an experimental version of XZ Utils. XZ Utils is a compression utility widely used in Linux distributions. The backdoor was discovered before it reached many systems. According to the source, Jia Tan’s real identity or affiliation, including any possible connection to a state-sponsored group, remained unclear.
CERT24