460
Russia and China-backed hackers are exploiting WinRAR zero-day bug
(techcrunch.com)
This is a most excellent place for technology news and articles.
You can read and build the source code yourself if you're really worried what some Russian FOSS contributors are up to, but I can assure you it's going to be a lot less sus that whatever a proprietary application can do without any ability to audit and check the code.