3 ms·GitHub projects targeted with malicious commits to frame researcher4 points by lucaslazarus 2y agodeleted 2y ago[deleted]not_your_vase 2y agoInnocent looking PR with eval along with hidden payload? Does this really take a 10x Carmack to spot this one?