OpenSSF 和 OpenJS 基金会就“针对开源项目的社会工程学接管”发布警告

原文链接（提及了一次近期针对 OpenJS 的未遂社工，外加一些针对开源项目的社工 patterns）

Open Source Security (OpenSSF) and OpenJS Foundations Issue Alert for Social Engineering Takeovers of Open Source Projects

https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-engineering-takeovers-of-open-source-projects/

HN Comments: https://news.ycombinator.com/item?id=40267666