[mafriese]

I’m not saying that this is related to Wikipedia ditching archive.is but timing in combination with Russian messages is at least…weird.

[armchairhacker]

The script was uploaded in 2024, and triggered today because of an accident

https://en.wikipedia.org/wiki/Wikipedia:Village_stocks#Scott...

[worksonmine]

And they probably used mind-control to make the admin run random userscripts on his privileged account as well, the capabilities of russian hackers is scary.

/s

It is just another human acting human again.

[tonymet]

Admin tasks are public in phabricator so it would be trivial to review chores and place malware in the chore's scope

[worksonmine]

Which only makes it that much more important to review everything you're running with a privileged account, right?

And if it really is as trivial as you say it should be fixed ASAP.

[tonymet]

I mean it's trivial for any attacker to discover admin tasks and know where to place malicious code for the admin tasks to execute it.