The Xz story from [last month](https://simonwillison.net/2024/Apr/5/everything-i-know-about-the-xz-backdoor/), where a malicious contributor almost managed to ship a backdoor to a number of major Linux distributions, included a nasty detail where presumed collaborators …