build1 publisher
Unexplained pending pulls showed up an hour before the antivirus found the fake font
A trojan disguised as a Font Awesome font ran from a VS Code automatic task for eleven weeks and force-pushed rewritten commits into eighteen repositories, signed with the developer's own passphrase-free SSH key.
Publishers:dev.to
Reality
- Evidence45
- Adoption30
- Hype gap+10
- Incentives55
- Confidence50