4 ms·

Hundreds watch, but how closely? Plenty of stories of fairly major projects having evil commits snuck in that remain for months.

• alphager 11mo ago
  Name a few.
  • deleted 11mo ago
    [deleted]
  • TylerE 11mo ago
    https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://medium.com/@aleksamajkic/fake-sms-how-deep-does-the-rabbit-hole-really-go-17e25c42f986#345c https://medium.com/@aleksamajkic/fake-sms-how-deep-does-the-... https://blog.linuxmint.com/?p=2994 https://blog.linuxmint.com/?p=2994 https://www.bleepingcomputer.com/news/linux/malicious-package-found-on-the-ubuntu-snap-store/ https://www.bleepingcomputer.com/news/linux/malicious-packag... https://www.cnx-software.com/2021/04/22/phd-students-willfully-committed-known-malicious-changes-to-mainline-linux/ https://www.cnx-software.com/2021/04/22/phd-students-willful... I could go on but I trust this is a sufficient number of examples.
    • pona-a 11mo ago
      Only two of these were actual malicious commits. Two others were malware inserted into the repositories (if Twitter could be thought of as a meta-repo), which is bad but not on the same scale.
    • dxxvi 11mo ago
      I wonder why nowhere talked about who Jia Tan was. In my understanding, a few people already talked to that person. Now, does Jia Tan really vanish?