#teaxyz #opensource
If you maintain a popular #opensource project, you may hit with scam #teaxyz pull requests soon.
The #GhostBlog project had 4 PRs from different people in the past 24 hours or so which all submit a "tea.yml" file which little explanation.
It appears that merging the PR would make them "codeOwners" of the project on the TEA blockchain, giving them some financial benefit. The TEA project does not clearly document how the file is used.
Sorry #teaxyz, this isn't helping #opensource !
Holy moly, #teaxyz makes it soooooo easy to install #FastlaneTools…
I don’t fully understand all the magic yet but it installed:
- curl
- OpenSSL
- PyYAML
- zlib
- Ruby 3.2.1
- fastlane 2.212.1
… all by only running `tea fastlane` 🤯