New comment by ffacu in "I found 10k GitHub repositories distributing Trojan malware"

ffacu — Thu, 18 Jun 2026 15:37:10 +0000

I think that this is becoming increasingly true only for large, well-known repositories, where the maintainers have a lot to lose by doing anything shady. I don't think the React team could get away with doing something like that, for example.

Hacker News: ffacu

New comment by ffacu in "I found 10k GitHub repositories distributing Trojan malware"