On: Backdoor in upstream xz/liblzma leading to SSH server compromise

[boutique]

Both are suspended for me. Check followers on both accounts, both have a suspended pill right next to their names.

[miduil → boutique]

Ah, thanks for correcting me there - really weird that this isn't visible from the profile itself. Not even from the organization.

The following page for each other show both accounts suspended indeed.

https://github.com/Larhzu?tab=following

https://github.com/JiaT75?tab=following

[miduil → miduil]

Lasse's account was restored

[fargle → boutique]

github should add a badge for "inject backdoor into core open source infrastructure"

[account42 → fargle]

Hey maybe it would get bad actors to come clean trying to get that badge.