GitHub projects targeted with malicious commits to frame researcher (opens in new tab)

(bleepingcomputer.com)

4 pointslucaslazarus1y ago1 comments

1 comments

1 comments · 1 top-level

Innocent looking PR with eval along with hidden payload? Does this really take a 10x Carmack to spot this one?

j / k navigate · click thread line to collapse