A threat actor has quietly spent the last two years integrating into the core team of maintainers of XZ Utils, ...