Microsoft engineer Andres Freund by chance discovered the malicious code in variations of the XZ Utils compression device, doubtless stopping hundreds of infections (Mike Larkin/Security Boulevard)