{"action":"created","issue":{"url":"https://api.github.com/repos/Homebrew/homebrew/issues/36873","labels_url":"https://api.github.com/repos/Homebrew/homebrew/issues/36873/labels{/name}","comments_url":"https://api.github.com/repos/Homebrew/homebrew/issues/36873/comments","events_url":"https://api.github.com/repos/Homebrew/homebrew/issues/36873/events","html_url":"https://github.com/Homebrew/homebrew/issues/36873","id":57851758,"number":36873,"title":"Building pinentry-mac executes remote code","user":{"login":"Midar","id":752237,"avatar_url":"https://avatars.githubusercontent.com/u/752237?v=3","gravatar_id":"","url":"https://api.github.com/users/Midar","html_url":"https://github.com/Midar","followers_url":"https://api.github.com/users/Midar/followers","following_url":"https://api.github.com/users/Midar/following{/other_user}","gists_url":"https://api.github.com/users/Midar/gists{/gist_id}","starred_url":"https://api.github.com/users/Midar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Midar/subscriptions","organizations_url":"https://api.github.com/users/Midar/orgs","repos_url":"https://api.github.com/users/Midar/repos","events_url":"https://api.github.com/users/Midar/events{/privacy}","received_events_url":"https://api.github.com/users/Midar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-02-16T21:12:28Z","updated_at":"2015-02-18T06:34:05Z","closed_at":null,"body":"From the included Makefile:\r\n`        @bash -c \"$$(curl -fsSL https://raw.github.com/GPGTools/GPGTools_Core/master/newBuildSystem/prepare-core.sh)\"`\r\n\r\nThis just executes unverified remote code. And this in a project that centers around security! They actually do that in all their repos and ignore any feedback that this is totally insecure.\r\n\r\nI think at this point, there's only one solution: Remove the Formula and advise everybody to never touch anything from that dev."},"comment":{"url":"https://api.github.com/repos/Homebrew/homebrew/issues/comments/74819897","html_url":"https://github.com/Homebrew/homebrew/issues/36873#issuecomment-74819897","issue_url":"https://api.github.com/repos/Homebrew/homebrew/issues/36873","id":74819897,"user":{"login":"DomT4","id":6998367,"avatar_url":"https://avatars.githubusercontent.com/u/6998367?v=3","gravatar_id":"","url":"https://api.github.com/users/DomT4","html_url":"https://github.com/DomT4","followers_url":"https://api.github.com/users/DomT4/followers","following_url":"https://api.github.com/users/DomT4/following{/other_user}","gists_url":"https://api.github.com/users/DomT4/gists{/gist_id}","starred_url":"https://api.github.com/users/DomT4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DomT4/subscriptions","organizations_url":"https://api.github.com/users/DomT4/orgs","repos_url":"https://api.github.com/users/DomT4/repos","events_url":"https://api.github.com/users/DomT4/events{/privacy}","received_events_url":"https://api.github.com/users/DomT4/received_events","type":"User","site_admin":false},"created_at":"2015-02-18T06:34:05Z","updated_at":"2015-02-18T06:34:05Z","body":"Apologies if my tone was abrasive. Not intentional."}}