C3PO:

Backdoor found in widely used Linux utility breaks encrypted SSH connections

arstechnica.com/security/2024/