top | item 33731874

(no title)

christophetd | 3 years ago

We just updated the wording. Thanks for the feedback.

discuss

order

denton-scratch|3 years ago

You seem to have updated the wording to "has been backdoored by a malicious actor". Isn't that more speculation, with the tentativeness removed? What facts incline you to believe it was a malicious actor, and not the maintainer?

christophetd|3 years ago

If the maintainer themselves added the backdoor, can't they be considered a malicious actor?

capableweb|3 years ago

> It is possible the original developer of the package had their account compromised and used by a malicious actor.

> whose maintainer's account was likely compromised by a malicious actor

Seems to still be speculating about the cause without diving deeper into the topic, or is there some cache invalidation of the article that is missing perhaps?

christophetd|3 years ago

Yes, that would be caching. We kept the first sentence, as it's still possible his account was compromised (we have no strong evidence to prove it, but no strong evidence to refute it either).