10 ms·
Is this a security incident? My first read was that it was just pushed by the maintainer directly (“Viktor”). I thought the headline was misleading. Is there an
by amscanne 5y ago
Is this a security incident? My first read was that it was just pushed by the maintainer directly (“Viktor”). I thought the headline was misleading. Is there any confirmation either way?
- sph 5y agoI don't think it is, the name seems to be spoofed and the email attached to the commit doesn't match @Yaffle. Git author and email are easily forged anyway.
- amscanne 5y agoIs it even spoofed, or is that his real name? It could just be an email not publicly associated with the GitHub account. AFAIK GitHub displays links to profiles purely as a convenience, based on the commit metadata.