[musl] possible malware link on musl community wiki

[musl] possible malware link on musl community wiki

[lmqt771]

[-- Attachment #1: Type: text/plain, Size: 598 bytes --]

Hi, I just mentioned this on the irc chat and they suggested I send an email here. I know the wiki is community maintened, but there's no contact info for any maintainers. The link for Ataraxia Linux under the section Projects using musl is very suspicious and possibly malicious or some type of malware. It just cycles through shady website after shady website at about one per second or so. Considering the wiki is linked from the official musl website, I wanted to report it immediately. If you need help maintaining the community wiki, let me know and I'd be happy to help out if I can.

mobius

[-- Attachment #2: Type: text/html, Size: 617 bytes --]

Re: [musl] possible malware link on musl community wiki

[Markus Wichmann]

Am Mon, Nov 27, 2023 at 10:31:50AM +0000 schrieb lmqt771@proton.me:
> Hi, I just mentioned this on the irc chat and they suggested I send an
> email here. I know the wiki is community maintened, but there's no
> contact info for any maintainers. The link for Ataraxia Linux under
> the section Projects using musl is very suspicious and possibly
> malicious or some type of malware. It just cycles through shady
> website after shady website at about one per second or so. Considering
> the wiki is linked from the official musl website, I wanted to report
> it immediately. If you need help maintaining the community wiki, let
> me know and I'd be happy to help out if I can.
>
> mobius

Considering the link in the Wiki is just the link to Ataraxia's github
page, I'm guessing these guys got their github hacked. I did a bit of
research and it appears they moved to gitlab instead. No clue what their
homepage is now, though.

Ciao,
Markus

Re: [musl] possible malware link on musl community wiki

[lmqt771]

[-- Attachment #1: Type: text/plain, Size: 1903 bytes --]

I did find the Github for the musl wiki and did a pull request to check all the links, but there's pull requests that are like five years old and still open, and only just a handful at that. So it appears maybe the maintainer has abandoned it. I could be wrong about that though. At the time I sent the email to the musl mailing list, I wasn't aware the musl wiki only takes contribs through Github and they're vetted. I just assumed random people could contribute, and then I thought great, what other links are like this? I know I didn't want to click around and find out after that. Thank goodness it was a near fresh install from a distro hop, so I just wiped the drive and started over just to be safe. I figured perhaps it was their official page that got abandoned and scraped up by a bot or something. On the IRC they said the wiki hasn't been maintained in a while.

-------- Original Message --------
On Nov 27, 2023, 12:29 PM, Markus Wichmann wrote:

> Am Mon, Nov 27, 2023 at 10:31:50AM +0000 schrieb lmqt771@proton.me: > Hi, I just mentioned this on the irc chat and they suggested I send an > email here. I know the wiki is community maintened, but there's no > contact info for any maintainers. The link for Ataraxia Linux under > the section Projects using musl is very suspicious and possibly > malicious or some type of malware. It just cycles through shady > website after shady website at about one per second or so. Considering > the wiki is linked from the official musl website, I wanted to report > it immediately. If you need help maintaining the community wiki, let > me know and I'd be happy to help out if I can. > > mobius Considering the link in the Wiki is just the link to Ataraxia's github page, I'm guessing these guys got their github hacked. I did a bit of research and it appears they moved to gitlab instead. No clue what their homepage is now, though. Ciao, Markus

[-- Attachment #2: Type: text/html, Size: 2007 bytes --]