ALT New Puppet module on the Forge: xzscanner A quick orchestrated check for compromised xz in your infra https://forge.puppet.com/modules/puppetlabs/xzscanner/readme This module utilizes a very simple bash script to monitor your infrastructure for vulnerable installations of liblzma. This module is not supported or maintained by Puppet and does not qualify for Puppet Support plans. It's provided without guarantee or warranty and you can use it at your own risk. All bugfixes, updates, and new feature development will come from community contributions.

ALT Two screenshots from Community S3E4 "Remedial Chaos Theory" illustrating a scene in which Troy arrives with boxes of pizza to find his apartment in total chaos. Words have been superimposed on various elements of the scene: Troy is the admin returning from the weekend, while the elements of chaos are labeled "unstable software production," "liblzma," "backdoor," and "opsec".