GitHub projects targeted with malicious commits to frame researcher

bleepingcomputer.com

4 pointslucaslazarus1 comment

Innocent looking PR with eval along with hidden payload? Does this really take a 10x Carmack to spot this one?