@malwareminigun@infosec.exchange
Post #1398852
2026-03-23 20:40 UTC
@coderanger They *did*. That's how JiaTan got maintainer status on the xz project's repo.
Replies (1)
-
@coderanger@cloudisland.nz 2026-03-23 20:47
@malwareminigun To the best of my knowledge that is not true. What has been reconstructed of Jia (for lack of a better name) getting added was mostly via sock-puppets and pressure tactics. The original maintainer was effectively bullied into adding them, relatively cursory checks showed this person didn't exist until shortly before the attack started.