Sharing this here to get awareness for devs because Discourse might be using one of the infected repo’s…
6 Likes
The infected repos are clones of the originals, the originals are OK.
5 Likes
We’re not aware of any impact to Discourse or our dependencies.
As @Mr.X_Mr.X mentioned, the tweet author has admitted that the findings were limited to forks/clones, rather than the true versions of dependencies:
11 Likes
Ah that is good to know. Better safe then sorry, haha. Felt this was a place where devs at least should be aware of the malware.
3 Likes
Welcome to internet! 
2 Likes