OpenMandriva: Statement regarding attempted distribution sabotage

How did it go from "He even performed a backup/mirror of several dozen of our repositories." to "He deleted part of our repository from GitHub. (..) [He published] an empty package in the cooker repository, which obsoleted all gnome and cosmic packages."?

I feel like there's a few steps missing there. How does it go from "a new person joins the community" to "he's able to nuke everything"? Sure, he might be reasonably well-known, but in the post it doesn't sound like he was a core maintainer, or even a very active community member. Do they just randomly hand out admin access to anyone?

I feel for the maintaners. There is a push and pull here on OSS.

However, I have made the choice to remove all my repos from the internet and self host in the face of LLM spam.

Because Im not dependent on PRs from randos this doesnt really matter to me. I think at some point OSS repos are going to have to come to grips with the reality of hosting on github or any public git host.

And go underground. Or decide whether the juice is any longer worth the squeeze. In my mind its not unless its off the internet. You may skate today, tomorrow you are completely screwed.

I had no idea mandriva/openmandriva still existed. I still have a mandrake cd somewhere, mostly because I cannot seem to be able to depart from physical media :)

TIL Mandriva/Mandrake Linux is still around.

Nearly a month ago AUR malware happen, now this - it starts to feel like there's some organized attempt to paint Linux distros as dangerous.

I feel like this is kinda sorta to be expected.

Every time someone actively approaches you with an offer to spend their real energy and lifetime on your thing, It's almost always about leverage in some way.

At least if there is actual work attached to it.

Money alone might be paid by people that just have too much of it or want to feel better about something.

But if they actively involve themselves to a degree that goes way beyond scratching their own itch, something's up.

You might get lucky and find a just genuinely good person, but you might also not.

"should have" "could have". Geez. This was malicious. Take legal action already!