xz malware injects backdoor
into Linux OpenSSH via systemd

Somebody's been doing the long con:

CVE-2024-3094: Report to oss-security
Timeline and summary
FAQ and Notes