Would Behavioral Analysis Have Caught the xz-utils Attacker? We Ran the Data.

Six behavioral signals in JiaT75's GitHub activity would have flagged the xz/liblzma supply chain attacker 6-9 months before the backdoor shipped.