I The Discovery

It marks a watershed moment in open source supply chain security, for better or worse.

— Russ Cox, Timeline of the xz open source attack