Skip to main content


Beware, there is an ongoing spambot attack in #GitHub issues in several projects were random people suggest "the fix" is to download a random file from mediafire.com. Like this:
This entry was edited (2 months ago)

Hubert Figuière reshared this.

in reply to daniel:// stenberg://

ah, I got one of those. It seemed to be of low enough priority to safely ignore for the moment, but I now know to ignore it forever. Thanks.
in reply to daniel:// stenberg://

I saw one of those yesterday within a minute of someone opening an issue on one of my repos.
in reply to daniel:// stenberg://

I got one of those this morning, but GitHub seems to have yanked it away between the time that I got the email notification and when I "WTAF?" navigated my way to the issue page.
in reply to daniel:// stenberg://

Got it too on my repo. Downloaded it for science. It contains an exe with some dll.

The "FastRsync.dll" lib makes me think this tool will suck crypto and secrets out of your computer, fast.

in reply to daniel:// stenberg://

just encountered that last guy lol. Reporting them does seem to get them banned pretty quick. I reported two and they were both banned within about 10 minutes.
in reply to daniel:// stenberg://

this has been happening all week. I've had to limit interactions on a org with 300 repos, because the bots keep triggering each other with activity
in reply to daniel:// stenberg://

@GossiTheDog

a chorus of voices slightly offset from each other but numerous

"to fix your trouble..."

in reply to daniel:// stenberg://

I tried to install the fix but I seem to be required to install Wine for it. Is there some project helping me install windows malware faster on linux? 😆
in reply to daniel:// stenberg://

I also got those comments, with random comments saying to download a binary from Dropbox..!
in reply to daniel:// stenberg://

This seems like a trivial pattern for Microsoft to nuke, but that's not a great sign.
in reply to daniel:// stenberg://

mediafire.com my behated💔
Nothing good has ever come out of that website
in reply to daniel:// stenberg://

seen this across repos and orgs the last week as well. Just
Report, use moderation (sad) or?
in reply to daniel:// stenberg://

I saw these start to pop-up in llvm issues yesterday.

It is troubling to see it is more widespread.

in reply to daniel:// stenberg://

lol this is hilarious.

More people need to explore other platforms for hosting their code. Something a little more self-sovereign.

in reply to daniel:// stenberg://

you can use codeberg instead of github.
There is a low probability to find spammer and hacker 👍
in reply to daniel:// stenberg://

I saw one of these with a link to Dropbox. Dropbox took the link down before I even saw the comment and the comment was removed very shortly after