Re:We Executed a Critical Supply Chain Attack on PyTorch
by trevyn on Monday January 15, 2024 @04:24AM
(#38998856)
Do you have a case study?
My prior is that GitHub is pretty competent in understanding malicious PRs to open source repos, and wouldn’t penalize the repo owner without other evidence of wrongdoing.
My prior is that GitHub is pretty competent in understanding malicious PRs to open source repos, and wouldn’t penalize the repo owner without other evidence of wrongdoing.