Somebody tried to push backdoored code into xz to target ssh, but the FOSS community doesn't sleep, so nothing happened. Imagine if this same problem happened on proprietary code 😂 you wouldn't know about it and no one would've caught it