On March 29, 2024, software engineer Andres Freund reported on the oss-security mailing list that versions 5.6.0 and 5.6.1 of xz Utils, a widely used data compression utility and library, contained a backdoor. He found it after noticing that SSH logins on a test system were consuming unusual amounts of processor time and taking roughly half a second longer than expected.