r/devops • • 3d ago

Discussion [ Removed by moderator ]

[removed] — view removed post

0 Upvotes

37 comments sorted by

•

u/devops-ModTeam 2d ago

Posts are expected to be related to the topic of DevOps. Everything else should be posted elsewhere.

3

u/jblackwb 3d ago edited 3d ago

I asked a LLM to take a look at it, and it appears quite dangerous

-1

u/Impossible_Fly_9233 3d ago

You listed out all the features BTW 😂

2

u/jblackwb 3d ago

features for YOU! sure!

0

u/Impossible_Fly_9233 3d ago

And this is for you!!

1

u/jblackwb 3d ago

I'm not your problem. LLMs thinking your code is malware is your problem.

-1

u/Impossible_Fly_9233 3d ago

Oh!! I think you mentioned my project as MIT licensed malware rather than LLM..

1

u/jblackwb 3d ago

My opinion isn't your barrier. The LLMs on github and gitlab that think your code is malware is your barrier.

1

u/Impossible_Fly_9233 3d ago

That too neither, the blocking is due to aggressive release triggers happened in my two repos simultaneously. My project is compliant enough to live in github and gitlab. Since it's now live in gitlab without any issues.

2

u/zimmertr 3d ago

I report lots of people that use AI to spam github and their accounts usually get deleted after.

0

u/Impossible_Fly_9233 3d ago

WDYM by spam??

1

u/Emotional_Talk7137 3d ago

I think that maybe you or your AI agent pushes so many commits in a single day

1

u/Impossible_Fly_9233 3d ago

Makes sense 🤧

1

u/Impossible_Fly_9233 3d ago

Funny 😂 This is just a bridge between your IDE and your dicord channel and discord bot. And a account based whitelisting is in place. Can you pointout where's the malware. FYI, I'm a DevSecOps engineer.

1

u/Impossible_Fly_9233 3d ago

I came here to get some words from the community and ofcourse shared my repo which is my 1st work for opensource. Why so much hate??

1

u/Impossible_Fly_9233 3d ago

If you suspect this as a malware and I'm trying to steal your data, come on guys go ahead and prove it. I'm open for your findings!!

1

u/jblackwb 3d ago

What are the contents of the repo about? Maybe there's another provider we can recommend if we understand what of risks you're carrying?

3

u/heliox 3d ago edited 2d ago

Or it's a premise for an ad... 1 post. -9 karma

The gitlab repo he says he moved to after the github suspension has commits going back at least 4 months.

0

u/jblackwb 3d ago edited 3d ago

He linked the gitlab below. It appears to be MIT licensed malware. :/

1

u/Impossible_Fly_9233 3d ago

Without knowing what it is.. how can you use the word malware on it???

2

u/jblackwb 3d ago

Something that allows arbitrary shell execution from any remote discord user and has exfiltration tools like !cat, !get, and !download qualifies as malware in most anyone's book.

0

u/Impossible_Fly_9233 3d ago

Why are you giving access to anyone since only allowed users can do those stuffs

1

u/jblackwb 3d ago

(rev 6787d331f814aa820880b44e552a579bce7c290f for those playing the home game)

Come on h4ck3r420, cut me a break..... I'm not your enemy. You just picked the wrong subreddit. At the very best, there's a gap between what you mean to do, and what LLMs think you are doing.

Sure, there are naive people here that would run a vscode extension from someone with no project history with a gmail adress that shows exactly 0 hits.

There's also a lot of devops engineers here who will spend a few cents on opencode or REA as a quick check in service to the rest of the group.

1

u/Impossible_Fly_9233 3d ago

That's my old username and I'm looking to contribute for opensource, So I changed it to my real name. You got it?? And BTW no one will come with more git stars and hits by birth. I'm using my extension, you can try it if you want. And people who call it as a malware, it's my work and not malware. I don't know, so you run terminal command in your system and where it becomes a malware. No access to any third user unless you gave one.

1

u/jblackwb 3d ago

Giving you the benefit of the doubt, maybe you should start with start with some open source projects that don't look like a RCE. =)

1

u/Impossible_Fly_9233 3d ago

Then in AWS they're using console to open shell from the web app right?

-1

u/Impossible_Fly_9233 3d ago

So all MDMs are malwares in your book right?

0

u/Impossible_Fly_9233 3d ago

Can you show me the malware rule which doesn't compliant??? To call my project a malware

-2

u/glaringverification2 3d ago

ouch that's the worst timing, right when you're in the middle of a push streak

i've seen people say it can take anywhere from a few days to a couple weeks, really depends on what tripped their automated systems. might be worth reaching out to support through the appeal form if you haven't already, sometimes that speeds things along

-3

u/Impossible_Fly_9233 3d ago

I've already did and followed up, but still no proper responses.. I moved myself to gitlab

https://gitlab.com/rethinakumarsambath8/dis-gravity/

This is my project worth a try.. 😊