A MICROCOSM OF THE INTERACTIONS IN OPEN SOURCE PROJECTS

Summary from the TLDR newsletter

The xz/liblzma vulnerability was introduced by an attacker who offered to help a struggling solo maintainer following community pressure to implement changes.