הקץ לקוד פתוח? סאוד ריזוואן על המשבר

תקציר מקורי באנגליתA compromised release of litellm, a Python package pulling three and a half million downloads a day, sat live for three hours installing a credential harvester for API keys, SSH keys and crypto keys along with a backdoor for remote command execution. It was caught by pure luck: the malware had a bug that crashed Cursor, and a researcher went looking. Saoud Rizwan uses it to mark how far the trust model has fallen. Zig's code of conduct now bans AI from pull requests, issues and even comments, because the team values growing contributors over collecting contributions. curl is weighing the end of a decades old bug bounty as AI generated reports drown it. tldraw closes pull requests on sight. GitHub shipped a switch to disable third party pull requests altogether, which is the feature that ma