[throwatdem12311]

Yeah, I refuse to just clone random projects. Luckily, I’m a rails developer - and scaffolding entire applications takes literally minutes.

Just give me the specification and I will build it end to end myself.

If you’re serious you would consider it. If you don’t - I dodged a bullet.

If you consider that people are using LLMs for code generation pretty much exclusively now this should be possible with any stack.

[Groxx]

Cloning should be fine on its own - git hooks aren't installable automatically, for reasons like this, and they treat anything that makes cloning unsafe as a pretty severe security issue so new discoveries get plugged quickly. This post's malware is possible because it's from a general archive, not a clone.

Though other stuff on your system might be less preventative, and that could run stuff in the repo folder. And I kinda wish git would force review of hooks and executable config everywhere before they're run - I would absolutely enable that, security is sometimes a bit annoying and that's inescapable.

[lmz]

It's not the cloning that gets you. It's the inevitable step of running whatever you cloned to "run the tests" or "see how it works".