If it was a compromise it also included the signing keys as the release tarball ...

		bpye on March 30, 2024 \| parent \| context \| favorite \| on: Backdoor in upstream xz/liblzma leading to SSH ser... If it was a compromise it also included the signing keys as the release tarball was modified vs the source available on GitHub.