Статья Стоит ли слепо доверять открытым исходникам? | Should we blindly trust open source?

[oceanaric]

Github has an Invisible Code problem.​

 

[shrekushka]

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise