News for hackers. Stuff that matters.
Re:Firefox 3rd Party Installer Campaign – Mozilla Community ... by jakub_g on Tuesday June 25, 2024 @10:07AM (#40788833)
Guessing, and not sure if this is relevant here, but some software (browsers like Chrome [1]) store filesystem metadata with the origin of the file download source.

[1] https://www.reddit.com/r/sysadmin/comments/b2j16p/til_chromi...

Re:Firefox 3rd Party Installer Campaign – Mozilla Community ... by MarkSweep on Tuesday June 25, 2024 @10:44AM (#40789283)
It’s not Chrome specific, the “mark of the web” is applied to any downloaded file:

https://en.wikipedia.org/wiki/Mark_of_the_Web