stencil-golang
| CVE-request-XZ-5.2.5-has-denia | stencil-golang | |
|---|---|---|
| 1 | 1 | |
| - | 4 | |
| - | - | |
| - | 8.9 | |
| - | 4 days ago | |
| Smarty | ||
| - | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CVE-request-XZ-5.2.5-has-denia
-
Backdoor in upstream xz/liblzma leading to SSH server compromise
I found a user who seems suspicious to me.
https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denia...
He understood the software architecture quite early on while working on the following repository. He connected the dots from his other projects and went rogue. (probably to benefit from crypto?). Take a look at his other repositories and code style and recent likes on github. Is he our Jia Tan?
stencil-golang
-
Backdoor in upstream xz/liblzma leading to SSH server compromise
Here's a PR on an employer-owned public Github repository where I made a change and Jared approved it. Please, let's not witch hunt.
https://github.com/getoutreach/stencil-golang/pull/404
What are some alternatives?
xz - XZ Utils [GET https://api.github.com/repos/tukaani-project/xz: 403 - Repository access blocked]
openconnect
libusb - A cross-platform library to access USB devices
VaRA-Tool-Suite
xz-backdoor-github - History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.
Pack - Pack
lbzip2 - Parallel bzip2 utility