@pmidden @jacqueline the recent XZ backdoor was initially uncovered by a postgresql dev who noticed some benchmarks were running **sightly** slower than normal.