[ivanjermakov]

> Why use a raw IP address? If anything, this screams “malware.”

If the victim is deep enough to check hook's content, it's unlikely they will just stop here losing suspicion. I'm sure most devs wouldn't think that doing `git commit` can be malicious (git security oversight?).

[zeratax]

if you just clone a repo no githooks are every automatically enabled. but since this was downloaded not cloned it's a different story

[zombot]

> git security oversight?

Executing downloaded code without prior review always is these days, regardless of the tool that does it.