Be Very Afraid: Git Commit Spoofing in Open Source - No False Alarm | Gabriel L Manor