The upstream xz repository and the xz tarballs have been backdoored

[keybreak]

I bet that’s where you’ve found the gimp…

P.S. Probably it’s jia tan!