https://itsfoss.com/github-gentoo-hacked/

https://itsfoss.com/github-gentoo-hacked/
What do I do now? Calculate use Gento, what is it all infected, do you ever know what the code is?

Only github mirror was hacked, not main repo
"Since the master Gentoo ebuild repository is hosted on our own infrastructure and since Github is only a mirror for it, you are fine as long as you are using rsync or webrsync from gentoo.org.”

part from .ebuild www-client/torbrowser-launcher
DESCRIPTION=“A program to download, updated, and run the Tor Browser Bundle”
HOMEPAGE=“https://*github*.com/micahflee/torbrowser-launcher”
SRC_URI=“https://*github*.com/micahflee/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz”

part from .ebuild net-im/signal-desktop-bin
inherit gnome2-utils pax-utils unpacker xdg-utils
DESCRIPTION=“Allows you to send and receive messages of Signal Messenger on your computer”
HOMEPAGE=“https://signal.org/
https://*github*.com/WhisperSystems/Signal-Desktop”
SRC_URI=“https://updates.signal.org/desktop/apt/pool/main/s/${MY_PN}/${MY_PN}_${PV}_amd64.deb

And now I have to assume that there is no danger and I have installed these programs and then work update other program. I do not know I’m not sure anymore.

And now I have to assume that there is no danger and I have installed these programs and then work update other program. I do not know I’m not sure anymore.

Fortunately not all github is hacked :slight_smile: