The Sabotage Incident
The OpenMandriva Linux project recently experienced an internal sabotage attempt following a dispute among contributors. According to project maintainer AngryPenguin, a contributor engaged in abusive behavior toward community members, prompting some to leave. In response, Davide Beatrici, lead developer of the Mumble messaging app and a friend of the accused contributor, deleted part of a repository that the team had maintained for nearly a decade. Beatrici also pushed an empty package to the Cooker development repository, which could have overridden packages for the Gnome and Cosmic desktop environments, potentially damaging users’ systems.
Impact and Response
The OpenMandriva team is actively restoring the deleted repositories and packages while conducting a full system audit to identify any other unauthorized changes. Although AngryPenguin acknowledged that Beatrici’s actions could constitute a criminal offense, the project has decided not to pursue legal action against the former contributor. Beatrici denied the sabotage allegations in a statement to The Lunduke Journal, claiming his intent was not to harm the project but to express frustration over members who deleted configuration files from repositories without consultation. The incident highlights the risks of granting administrative privileges to external contributors and the potential for internal disputes to escalate into supply chain threats.
Source: BleepingComputer
