It's in the issue body, first bullet point. https://github.com/go-gitea/gitea/issues/4167#issue-330114075 https://github.com/go-gitea/gitea/issues/4167#issue-33

It's in the issue body, first bullet point. https://github.com/go-gitea/gitea/issues/4167#issue-330114075 https://github.com/go-gitea/gitea/issues/4167#issue-33011407... > Most of go-gitea organization repositories new release&tag was created with name 0 and added install.exe binary (13KB in size) to that release that was malicious (from our analysis contained crypto currency miner)