Malicious Maven Package Impersonating 'XZ for Java' Library Introduces Backdoorsocket.dev4 pointsfeross2 years ago