Post #3881717

This is your periodic reminder that all the code you browse via the web UI of something like a #git repository doesn't necessarily match what you get via a git clone. In fact it's really easy to serve a trojan that's only in the git clone view so if you need to inspect code do it on the pulled copy. Of course I can also only serve the trojan version to selected IP ranges matching a given corporation too. Isn't supply chain trust fun !