Martin Hamilton@CoralineAda @mcc Thank you so much for this, Coraline - you may have just saved humanity! :blobthanks:
Hmmm. Perhaps we could use the GH API to give us an early warning when a much loved codebase is compromised. Maybe starting with something like this:
curl -s -H "Authorization: Bearer $AUTH_TOKEN" \-H "Accept: application/vnd.github+json" \
"https://api.github.com/search/issues?q=is:pr+is:merged+author:claude&per_page=100&page=1" \
| jq -r '.items[].repository_url | sub("https://api.github.com/repos/";"")' \
| sort \
| uniq -c
This gets us a very lazyweb list of recently infected repos, although there are only ten results returned, with no pagination. That's a bit less than the 2.3 million commits reported in the web UI :blobfoxconfused:
1 biner88/chart_sparkline1 davidray/twitter-bootstrap-calendar
1 laudspeaker/laudspeaker
1 ripienaar/free-for-dev
4 segmentio/action-destinations
2 uptech/flutter_app_analytics
(etc)
Also author:claude is of course but one vector for the hungry ghosts... :sadturtle:
All GNU social JP content and data are available under the