News for hackers. Stuff that matters.

A comment on Node-ipc supply chain attack: peacenotwar. Parent comment

Re:Node-ipc supply chain attack: peacenotwar by sodality2 on Thursday March 17, 2022 @10:38PM (#30718210)
I see "This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository." on all of the links, does that mean it's possible someone pushed to a fork and "framed it"?

Edit: Never mind, here's the commit: https://github.com/RIAEvangelist/node-ipc/commit/847047cf7f8...

[ Parent | on HN ]
Re:Node-ipc supply chain attack: peacenotwar by gruez on Thursday March 17, 2022 @10:46PM (#30718253)
even though the commit isn't on any branch, you can still see it's tagged by the repository. This gives pretty strong assurance that it wasn't a commit that the author was "framed" for.
[ Parent | on HN ]