openSUSE maintainers received notification of a supply chain attack against the “xz” compression tool and “liblzma5” library. Background Security Researcher …