below is a security analysis done by clause code. reference https://x.com/adibhanna/status/2046988777789555191 repo: https://github.com/ritualPlay-Net/RitualPlay/ the scammer: https://www.linkedin.com/in/dean-gallimore-440669234/ his email: michael@ritualplay.net NOTE: if you decide to clone this repo, do NOT run npm install, or try to run it. it has a backdoor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/run b/run | |
| index 970dd83..8f4b234 100755 | |
| --- a/run | |
| +++ b/run | |
| @@ -1,7 +1,7 @@ | |
| #!/usr/bin/with-contenv bashio | |
| # shellcheck shell=bash | |
| -USER="homeassistant" | |
| +USER="core" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Inspired by: | |
| # https://blog.gitea.com/creating-go-actions/ | |
| # https://gitea.com/Zettat123/test-simple-go-action/src/branch/main/.gitea/workflows/call-username.yml | |
| # https://gitea.com/actions/release-action | |
| # https://gitea.com/gitea/runner-images | |
| # https://github.com/vegardit/docker-gitea-act-runner | |
| # https://github.com/catthehacker/docker_images | |
| # | |
| --- | |
| # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # iPXE build depends | |
| set -e | |
| apt-get install -y liblzma-dev git build-essential | |
| # clone iPXE | |
| [ ! -d ./ipxe ] && git clone http://git.ipxe.org/ipxe.git | |
| cd ipxe/src | |
| make clean |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $reboot | |
| bash: /sbin/reboot: Input/output error | |
| $shutdown -r now | |
| bash: /sbin/shutdown: Input/output error | |
| # | |
| # if the above reboot commands doesn't work try either forced reboot or shutdown | |
| # |
Given a subscribed calendar with a url like
https://example.com/example.ics
To force Google Calendar to refresh and reload the contents right now, unsubscribe from the calendar and subscribe to a new calendar with a URL like
https://example.com/example.ics#1
Adding the anchor tag will force Google Calendar to think of it as a new calendar
Create file /etc/systemd/system/docker-compose@.service. SystemD calling binaries using an absolute path. In my case is prefixed by /usr/local/bin, you should use paths specific for your environment.
[Unit]
Description=%i service with docker compose
PartOf=docker.service
After=docker.service