Someone copied our GitHub project, added stars, and injected malicious code

[thunderbong]

https://old.reddit.com/r/golang/comments/1jbzuot/someone_copied_our_github_project_made_it_look/

[Gys]

I made a simple scanner to see if any package in a project is accessing the shell: https://github.com/Gys/cmdscanner