Backdoor in upstream xz/liblzma leading to SSH server compromise