Very true. There was an issue in one of the linix communities a while where someone got away with submitting malicious code. It was eventuslly discovered and corrected, but it does go to show that bad actors can do some serious damage to open source projects.

[–] cyclohexane@lemmy.ml 8 points 1 year ago (1 children)

Although this is fair, those contributors were from a research group from a prestigious university. That makes them much more trustworthy by default, and its natural that a code reviewer will give them more benefit of doubt.

[–] Dioxy@programming.dev 2 points 1 year ago

I remember this, wasn't this a complete shitshow in the news?