#开源项目
又一种很“新颖”的往开源项目里下毒的手法：有人对Python 包 ultralytics 发了 PR，其中包含如图分支名，当 GitHub 执行 CI 任务时，执行脚本获得仓库密钥，进而在发布包中植入加密货币挖矿程序
https://lwn.net/Articles/1001215/
BY codedump的电报频道
Telegram is a cloud-based instant messaging service that has been making rounds as a popular option for those who wish to keep their messages secure. Telegram boasts a collection of different features, but it’s best known for its ability to secure messages and media by encrypting them during transit; this prevents third-parties from snooping on messages easily. Let’s take a look at what Telegram can do and why you might want to use it.
telegram from in