@jwildeboer@jzb Definitely, but my point is: I'm not that confident that this is a demonstration of open source working to detect this stuff early. Yes in this case it's been caught early and not affecting many production systems yet. But, as the hero of this story himself says, it was a combination of coïncidences that led him to find the injection; each one of these circumstances not occuring would have resulted in this being missed.