How is that innocent looking? exec(''.join(chr(x) for x in [...])) stands out li... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		josephcsible on Nov 13, 2024 \| parent \| context \| favorite \| on: Backdoor attempt on Exolabs GitHub repo through an... How is that innocent looking? exec(''.join(chr(x) for x in [...])) stands out like a sore thumb.

modeless on Nov 13, 2024 | [–]

The username is literally "evildojo666"

hypeatei on Nov 13, 2024 | | [–]

It's not, I think the headline is for clicks and engagement.

thebears5454 on Nov 13, 2024 | | [–]

Looks like he accidentally added a file. It's not "innocent" but definitely disguised by appearing as a readme only change

ramon156 on Nov 13, 2024 | | [–]

Even the PR is described as just a docs change

bravetraveler on Nov 13, 2024 | [–]

No injection here, purely functional programming

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact