18 replies

1. Pelle Wessman 19 min later

   Seems to be a crypto stealing campaign

   1. Pelle Wessman 19 min later

      And there is more chatter in Slack and Discord right now when everyone is figuring things out

      1. Pelle Wessman 32 min later

         I posted a little reminder in one channel about engaging some of the social media accounts behind some of the larger projects there

2. Wes 32 min later

   Well I for one have been working internally on mitigations and missed lunch dealing with this. The last thing on my mind was an announcement via socials. This is a good reminder to post, and I will go do that now, but also lets not judge OSS maintainers while we are at it.

   1. Wes 39 min later

      bsky.app/profile/expr...

      1. Zach Leatherman 51 min later

         nice to see an update from astro too bsky.app/profile/mk.g...

3. Matt Kane 1 hr later

   We were busy putting out a release

   1. Wes 1 hr later

      bsky.app/profile/notw...

      As much as I am pro responsibility for OSS maintainers, I want to point out that there are more important things you can do than make a social post. Let's level up our empathy and start with giving that grace to fellow maintainers.

   2. Zach Leatherman 1 hr later

      oh, huh — are you the only one doing release management over there? sorry for roping you in after-hours

      1. Matt Kane 1 hr later

         I was genuinely grateful for the heads-up, and that's why I took the lead in doing the mitigation. Luckily others were around to handle the release while I took my daughter to gymnastics. We did the socials after the release. Not everything needs to be an opportunity to dunk on other maintainers

         1. Zach Leatherman 1 hr later

            Huh… sorry. I don’t want the post to come across as a dunk — I was only reacting to the situation in real time and was surprised the ecosystem at large wasn’t escalating faster

            1. Matt Kane 1 hr later

               OK, cool. Most of the relevant core maintainers are in Europe, so it was out of hours for us all. We don't have pagerduty: we just have Discord!

               1. Zach Leatherman 1 hr later

                  For sure — the only reason I was early to the thread was time-zone luck!

4. Simon H 1 hr later

   What a weird thing to say while people are actively analyzing the impact of the situation, some after-hours

   1. Zach Leatherman 1 hr later

      Really happy to see more accounts posting about it now! This situation felt like it needed urgent escalation to more people!

      1. Simon H 1 hr later

         In our case it would have been needless panic: bsky.app/profile/svel...

         1. Zach Leatherman 2 hr later

            Good thread!

5. tent10.bsky.social 7 hr later

   Dang what a way to be lol why did you do this in the most toxic way