When test data became a build step.
An exact fragment of the compromised XZ release macro, an inspectable byte-level model, and the boundary where build data became instructions.
attack artifact
gl_path_map='tr "\t \-_" " \t_\-"'
changequote(,)dnl
gl_sed_escape_for_make_1="s,\\([ \"&'();<>\\\\\`|]\\),\\\\\\1,g"Source revision: 46cb28adbbfb8f50a10704c1b86f107d077878e6. Exact source
The interactive browser model is an original bounded reconstruction; it does not execute the original source.
Inspect the model module · Read the mechanism, preconditions, defenses and limits