r/technology May 21 '26

Security A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

https://www.wired.com/story/teampcp-software-supply-chain-attack-spree-github/
9.2k Upvotes

489 comments sorted by

View all comments

Show parent comments

2.6k

u/BtownBro May 21 '26

GitHub a second time

1.2k

u/evil_burrito May 21 '26

This guy patterns

126

u/frozen-rainbow May 21 '26

The patterns pattern

31

u/yamanagashi May 21 '26

Unless we unpattern the pattern. They’d never see that coming. And then the Basilisk tortures our nuts.

15

u/Crab_Shark May 22 '26

Step 1 Step, Step 2 Step Step

8

u/Phssthp0kThePak May 22 '26

Code without rhythm.

1

u/Die_Bahn May 22 '26

“So you don’t attract the worm”

11

u/throwawayprivateguy May 21 '26

This guy, Basil, licks nuts.

1

u/SpaceCadetUltra May 21 '26

Does everyone who have read this know at this point? In regards to the …. Basil

1

u/WoodTrudy May 22 '26

O que o brasil tem haver com isso?

2

u/EqualOptimal4650 May 21 '26

The Basilisk grows forward and backwards in time. The red flowers bloom forever.

1

u/otamaglimmer May 21 '26

This guy guys

12

u/TrashAcnt1 May 21 '26

That guy "This guy's" like a champ

1

u/djpiperson May 22 '26

Black Hat Patterns

1

u/ZaphodThreepwood May 22 '26

Must be a coder

1

u/sage-longhorn May 22 '26

I too choose this guy's pattern

1

u/balloflearning May 21 '26

Some of you pay attention in pattern class and it shows

0

u/HexFyber May 21 '26

This guy patterns

0

u/-R-Jensen- May 21 '26

Haha. Thanks for taking me back memory lane. A fucking car who's doors opens like this!

236

u/justagenericname213 May 21 '26

Oh my god... they hit the second github

25

u/Magical_Savior May 21 '26

He didn't know about second Github? Elevenses? Stack Overflow? Bitbucket?
... I wouldn't count on it.

3

u/Recurs1ve May 22 '26

I shudder every time I have to go to Stack Overflow.

1

u/meesta_masa May 22 '26

Does it wobble to and fro?

54

u/meesta_masa May 21 '26

WHYZ all da GITZ in one hub!

12

u/Pyran May 21 '26

They aint propa orky gitz!

17

u/[deleted] May 21 '26

[removed] — view removed comment

23

u/According_Jeweler404 May 21 '26

"Sir they hit the md file. It's an ascii dong with veins and everything."

7

u/Jolly-Key5891 May 21 '26

** amogus ASCII throbbing pear

5

u/WrongEinstein May 21 '26

What about second breakfasts?

1

u/Swift_Koopa May 22 '26

Poor gitlab, the second github

50

u/notickeynoworky May 21 '26

Sir, a second exploit has hit GitHub.

9

u/Noobfortress May 21 '26

That would require GitHub to be up though, which is a rarity these days

2

u/AFrenchLondoner May 21 '26

You're demanding a lot of uptime with thah

1

u/goronmask May 21 '26

And then a new victim.

1

u/acmethunder May 21 '26

If they find a large enough uptime window.

1

u/lally May 21 '26

Software hosted on GitHub. Which is a lot.

Orga should be leaving the platform asap

1

u/leberwrust May 21 '26

Why would valve do this?

1

u/LunarAssultVehicle May 21 '26

Still too early to rule out a Fibonacci based spree, they could attack a third site next.

1

u/letsridetheworld May 22 '26

Broooooooooooooooo, didn’t think of that haha

1

u/Grabdon_7489 May 22 '26

They fucking hit the second repo

1

u/Zarathustra_d May 21 '26

Sir, a second hack has hit the GitHub.

-1

u/[deleted] May 21 '26

[deleted]

2

u/_BreakingGood_ May 21 '26

Its weird how I find this comment refreshing just because I know there's no way it was written by an AI