News for hackers. Stuff that matters.
Re:We Executed a Critical Supply Chain Attack on PyTorch by Groxx on Sunday January 14, 2024 @10:52PM (#38997287)
Until someone tries to mine Bitcoin in yours, yeah
Re:We Executed a Critical Supply Chain Attack on PyTorch by trevyn on Monday January 15, 2024 @04:24AM (#38998856)
Do you have a case study?

My prior is that GitHub is pretty competent in understanding malicious PRs to open source repos, and wouldn’t penalize the repo owner without other evidence of wrongdoing.