pedronauck/reworm
View on GitHub ↗ ★ 1,458 TypeScript
🍫 the simplest way to manage state
4 mentions on Hacker News by 4 people: 0 stories, 4 comments · first 2026-03-15 · latest 2026-03-16
20082026
-
…force-pushed to master overwriting the git history. Notice that the original commit is verified: https://github.com/pedronauck/reworm/commit/df8c1803c519f599... While the malicious one is not: https://github.com/pedronauck/reworm/commit/d50…
comment by RVuRnvbM2e · 2026-03-16 · in Glassworm is back: A new wave of invisible Unicode attacks hits repositories -
…the affected repos, ironically named "reworm". The malicious code was introduced in this commit - https://github.com/pedronauck/reworm/commit/d50cd8c8966893c6... It says coauthored by dependabot and refers to a PR opened in 2020 (…
comment by nstart · 2026-03-16 · in Glassworm is back: A new wave of invisible Unicode attacks hits repositories -
In this instance the PR that was merged was from 6 years ago and was clear https://github.com/pedronauck/reworm/pull/28 . Looks to me like a force push overwrote the commit that now exists in history since it was done 6y later.
comment by mmlb · 2026-03-15 · in Glassworm is back: A new wave of invisible Unicode attacks hits repositories -
…do note the line about "pedronauck pushed a commit that referenced this pull request last week"): https://github.com/pedronauck/reworm/pull/28 Original commit: https://github.com/pedronauck/reworm/commit/df8c18 Amended commit:…
comment by vitus · 2026-03-15 · in Glassworm is back: A new wave of invisible Unicode attacks hits repositories