The Apiiro research team has detected a repo confusion campaign that has evolved and expanded, impacting over 100k GitHub repos with malicious code.
  • delirious_owl@discuss.online
    13·
    10 months ago

    No, apt has signatures and a team of maintainers whose job it is to verify the packages match what the Dev produced