Discrepancy between what's in GitHub and what's been published to PyPI for v8.3.41 · Issue #18027 · ultralytics/ultralytics
github.com
Bug Code in the published wheel 8.3.41 is not what's in GitHub and appears to invoke mining. Users of ultralytics who install 8.3.41 will unknowingly execute an xmrig miner. Examining the file util...
    • Azzu@lemm.ee
      101·
      2 months ago

      Pull requests are not a feature of git, you probably thought they were?

      • Zykino@programming.dev
        4·
        2 months ago

        Yup, pull requests are an invention from git’s servers (I think github came up with that first). The built in way (famously used by the linux kernel) is git-send-email.

        • Azzu@lemm.ee
          4·
          2 months ago

          GitHub is completely unrelated to git.

          git-send-email is not even very similar to a pull request, just tangentially related but very different conceptually.