top | item 45345753

(no title)

anotherlogin448 | 5 months ago

And yet everything is open source and easily auditable. Most likely OP got pwnd and clearly is unable to understand sarcasm.

You all really think that hotio snuck a crypto miner in somehow with all clearly open source code - and not a single person but OP noticed for years?

discuss

order

wok4899|5 months ago

With the SSH/NPM supply chain attack, we all live in fear now. It just need one very smart person to deploy such hack. I'm not saying hotio did something, all I am saying that with new information, we all should check our deployment. Along with OP I'm affected, where I never have exposed the docker to world ever.

So we should not deny the possibility of something off here.

hedsick|5 months ago

You aren’t affected though… the output you posted clearly shows the only response to that process grep was your own grep…