logoalt Hacker News

ack_inclast Monday at 11:20 AM0 repliesview on HN

The socket.dev deconstruction of the worm (https://socket.dev/blog/shai-hulud-strikes-again-v2) suggests that the destructive actions on GitHub were not part of the malware itself.