Gentoo Archives: gentoo-dev

From: "Francisco Blas Izquierdo Riera (klondike)" <klondike@g.o>
To: gentoo-announce@l.g.o
Cc: Gentoo Development <gentoo-dev@l.g.o>, Gentoo mailing list <gentoo-user@l.g.o>
Subject: [gentoo-dev] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!
Date: Thu, 28 Jun 2018 21:16:34
Message-Id: 9fa78b84-56c4-674b-77a9-4b484a10995b@gentoo.org
Hi!

I just want to notify that an attacker has taken control of the Gentoo
organization in Github and has among other things replaced the portage
and musl-dev trees with malicious versions of the ebuilds intended to
try removing all of your files.

Whilst the malicious code shouldn't work as is and GitHub has now
removed the organization, please don't use any ebuild from the GitHub
mirror ontained before 28/06/2018, 18:00 GMT  until new warning.

Sincerely,
Francisco Blas Izquierdo Riera (klondike)
Gentoo developer.

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies