Gentoo Archives: gentoo-dev

From: "Francisco Blas Izquierdo Riera (klondike)" <klondike@g.o>
To: gentoo-announce@l.g.o
Cc: Gentoo Development <gentoo-dev@l.g.o>, Gentoo mailing list <gentoo-user@l.g.o>
Subject: [gentoo-dev] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!
Date: Thu, 28 Jun 2018 21:16:34
Message-Id: 9fa78b84-56c4-674b-77a9-4b484a10995b@gentoo.org
1 Hi!
2
3 I just want to notify that an attacker has taken control of the Gentoo
4 organization in Github and has among other things replaced the portage
5 and musl-dev trees with malicious versions of the ebuilds intended to
6 try removing all of your files.
7
8 Whilst the malicious code shouldn't work as is and GitHub has now
9 removed the organization, please don't use any ebuild from the GitHub
10 mirror ontained before 28/06/2018, 18:00 GMT  until new warning.
11
12 Sincerely,
13 Francisco Blas Izquierdo Riera (klondike)
14 Gentoo developer.

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies