Yeah, if this is the new normal I might start day drinking at some point in the coming weeks.
summarity•10m ago
Working with maintainers (on the GitHub side) there’s definitely been a rise of malware dropper attacks against popular OSS repos, though this is particularly brazen - pressure tactics and all.
jtakkala•8m ago
Not going to comment on the PR commentary, but the victim GitHub account is suspicious itself, recent account, a few fresh repos, following 14.5k others, and I count three surnames on the original account (the username, plus two in the README history).
zezcko•12m ago
gryfft•11m ago