422

If you're developing a FOSS project, be aware of cryptobros trying to PR a tea.yml into it. (connortumbleson.com)

submitted 6 months ago by db0@lemmy.dbzer0.com to c/opensource@lemmy.ml

98 comments fedilink hide all child comments

Yet another "brilliant" scheme from a cryptobro. Naturally this caused a gold-rush for scammers who outsourced random people via the gig economy to open PRs for this yml file (example)

you are viewing a single comment's thread
view the rest of the comments

[-] frezik@midwest.social 78 points 6 months ago

Actually, I only want to add one file, tea.yml, to your repository. Because I have a job that requires uploading the file and I also don't know what it is used for.

So you want me to merge a file you use on your job and you don't know what it does?

I see no issue. Merged!