ImageGlass Packages Spider.com Botnet

github.com

3 pointsalrlroipsp2 comments

Yikes:

"BIN +10.3 MB Source/Libs/Spider-sdk/x86_64/bs-sdk.dll"

Commit message: "restructure external dlls" [sic]

edit: And to dispel any doubt that the dev comprehended exactly what he was inserting:

>"Share devide IP with Spider.com customers to pass traffic through your device."

I think Hanlon's razor applies here. There's more malicious ways to insert spyware into an open source code base