This is the first time I'm posting anything here but I figured this may be the right audience.

I've never run into something like this and I don't quite know what to make of it. I'm the author and maintainer of libgpiod. The official git repository is the one at kernel.org[1]. There's also a github mirror[2] as well as a documentation page[3] at readthedocs that I maintain.

I noticed (purely by chance) that there's a new website at libgpiod.com that's been created recently. I have nothing to do with it. It's clearly AI-generated but it redirects to my github. It's a 2 month old domain, anonymized registrar, protected by Cloudflare and NeoProtect and a Swedish host behind that.

Clearly someone went to great lengths to stay anonymous. I'm afraid of falling victim to some new elaborate supply chain attack. What should I do about it (if anything)? Has anyone else experienced something similar?

[1] https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/
[2] https://github.com/brgl/libgpiod
[3] https://libgpiod.readthedocs.io/
Libgpiod - Modern C Library for Linux GPIO Hardware Control

Libgpiod is a modern C library for Linux GPIO control, enabling efficient hardware access for embedded and system developers. #Libgpiod

Libgpiod
@brgl I don't think advertisements on a website for such specific purpose SW would pay the cost of domain, so more likely this prepares for spreading malware and future supply chain attack.

Unless I underestimated popularity of libgpiod :)

@krzk @brgl

> Unless I underestimated popularity of libgpiod :)

libgpiod is wildly popular with me but I'm not sure that counts for much. ;) [1]

I hope they can sort this out before libgpiod is compromised if it is, in fact, a target.

[1] https://github.com/HankB/GPIOD_Debian_Raspberry_Pi

GitHub - HankB/GPIOD_Debian_Raspberry_Pi: Explore GPIOD on Raspberry Pi running Debian Linux

Explore GPIOD on Raspberry Pi running Debian Linux - HankB/GPIOD_Debian_Raspberry_Pi

GitHub