My #Arch Linux-based webserver had the backdoored xz package installed. I feel violated. Bleeding edge huh? Currently installing Windows Server 2022.... or not.