zlacker

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

>>jovial+(OP)
It never came to Debian and was a work of a tremendous effort. This almost never happens, and when it does, practically nothing can protect you.