@msmeissn are you sure that that code doesn't have any other backdoors. The bad actor already released version 5.4 and signed it! I think you have to go further back.

Andreas Schneider (gladiac) - about 1 month ago

https://tukaani.org/xz-backdoor/