It's a bit unclear as to what's going on there.
Is the codebase itself compromised? Did the developer's computer get compromised?
Did one of the external libraries that it pulls in from git get compromised?
Is the codebase itself compromised? Did the developer's computer get compromised?
Did one of the external libraries that it pulls in from git get compromised?
https://github.com/lawl/NoiseTorch/issues/254#issuecomment-1...
Also this is very good example, why everyone should use VM for browsing internet, or better yet - different machine. If you're popular enough, there alway be people who will use that $1mil RCE on you.
Well, it seems the maintainer panicked hard really quickly, assumed NoiseTorch was compromised, and deleted everything on his computer that could help knowing if it was actually the case...