I don't think it is, the name seems to be spoofed and the email attached to the ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sph on April 9, 2022 \| parent \| context \| favorite \| on: NPM package event-source-polyfill compromised by p... I don't think it is, the name seems to be spoofed and the email attached to the commit doesn't match @Yaffle. Git author and email are easily forged anyway.

amscanne on April 9, 2022 [–]

Is it even spoofed, or is that his real name? It could just be an email not publicly associated with the GitHub account. AFAIK GitHub displays links to profiles purely as a convenience, based on the commit metadata.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact