Gentoo Archives: gentoo-dev

From: "Francisco Blas Izquierdo Riera (klondike)" <klondike@g.o>
To: gentoo-announce@l.g.o
Cc: Gentoo Development <gentoo-dev@l.g.o>, Gentoo mailing list <gentoo-user@l.g.o>
Subject: [gentoo-dev] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!
Date: Thu, 28 Jun 2018 21:16:34
1 Hi!
3 I just want to notify that an attacker has taken control of the Gentoo
4 organization in Github and has among other things replaced the portage
5 and musl-dev trees with malicious versions of the ebuilds intended to
6 try removing all of your files.
8 Whilst the malicious code shouldn't work as is and GitHub has now
9 removed the organization, please don't use any ebuild from the GitHub
10 mirror ontained before 28/06/2018, 18:00 GMT  until new warning.
12 Sincerely,
13 Francisco Blas Izquierdo Riera (klondike)
14 Gentoo developer.


File name MIME type
signature.asc application/pgp-signature