WikiSpikes

What the world suddenly looked up

XZ Utils backdoor saw 244x more Wikipedia readers than usual

XZ Utils backdoor drew 123,078 views on 2026-07-28, 244x more than the usual 504 a day over the previous 60 days.

WikiSpikes

XZ Utils backdoor

Patched software backdoor

244x
123,078 views
usually 504 a day
Daily Wikipedia pageviews for XZ Utils backdoor050K100K150K200K123,07814 Jun6 Jul28 Jul
Wikipedia pageviews, 28 Jul 2026 wikispikes.com
View as table
Daily Wikipedia pageviews for XZ Utils backdoor
DateViews
2026-07-28123,078
2026-07-27654
2026-07-26403
2026-07-25412
2026-07-24996
2026-07-23588
2026-07-22576
2026-07-21551
2026-07-20547
2026-07-19440
2026-07-18332
2026-07-17437
2026-07-16467
2026-07-15451
2026-07-14424
2026-07-13506
2026-07-12476
2026-07-11310
2026-07-10478
2026-07-09558
2026-07-08547
2026-07-07605
2026-07-06501
2026-07-05328
2026-07-04298
2026-07-03408
2026-07-02453
2026-07-01675
2026-06-30569
2026-06-29429
2026-06-28361
2026-06-27359
2026-06-26547
2026-06-25463
2026-06-24426
2026-06-23541
2026-06-22637
2026-06-21338
2026-06-20398
2026-06-19462
2026-06-18540
2026-06-17587
2026-06-16704
2026-06-15569
2026-06-14448

Download this chart

What this article is

On 29 March 2024, a malicious backdoor was discovered in the compression software XZ Utils. The backdoor gives an attacker who possesses a specific private key the ability to remotely execute code on an affected system through OpenSSH, a set of networking utilities. The backdoor was discovered by software developer Andres Freund.

Summary text from the Wikipedia article "XZ Utils backdoor", available under CC BY-SA 4.0. Read the full article.

How this was measured

Views are Wikimedia's own pageview counts for en.wikipedia, filtered to agent=user so automated traffic is excluded. The baseline is the median of the previous 60 days, which is used instead of the mean so that an earlier surge cannot flatten a later one. The multiple is the day's views divided by that median.

Read XZ Utils backdoor on Wikipedia