thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

gasi

var request = require('request');
var settings = {
    AKAMAI_USER: 'test',
    AKAMAI_PASSWORD: '...',
    AKAMAI_NOTIFICATION_EMAIL: ''
};

var akamai = exports;

var SOAP_URL = 'https://ccuapi.akamai.com:443/soap/servlet/soap/purge';