A backdoor in xz

I'd wager that most Debian developers use development/testing for their development systems. So "only" getting into development/testing is still quite bad.