But was that code placed there by IA or by the malicious party?

Verge reports someone has taken credit for an ongoing DDOS against IA. "An account on X called SN_Blackmeta said it was behind the attack and implied that another attack was planned for tomorrow" https://www.theverge.com/2024/10/9/24266419/internet-archive...

Ok, let's switch to that link. Thanks!

Submitted URL was https://archive.org/.

The verge generally is clickbait, another site choice would have been better.

That class of sites generally is, yes. But on HN we go by article quality, not site quality (https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...) and I didn't see a better specific article on this. If there is a better one, we can change the link again.

This bad actor has videos of them supposedly “ddosing” Spotify by pinging 1.1.1.1 in two terminal windows on their Twitter.

Is there any link between them and the real attack or are they just unrelated people claiming credit for it?

Sounds snarky to me. I'll bet it was the malicious party.

it wouldn’t be a window.alert if it were IA