3 ms·

For what it's worth, elsewhere in this comment section someone posted that Github Support says the zip downloads weren't related to this incident. Reading betwe

For what it's worth, elsewhere in this comment section someone posted that Github Support says the zip downloads weren't related to this incident. Reading between the lines, the compromised repos were probably accessed using normal git clone actions.

all-the-lights 5y ago
That was me who posted that :) seems unrelated, but still hoping to get that figured out anyway.