{"id":182028,"date":"2026-06-11T14:48:57","date_gmt":"2026-06-11T12:48:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij"},"modified":"2026-06-11T14:48:57","modified_gmt":"2026-06-11T12:48:58","slug":"v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","title":{"rendered":"In Fedora, a compromised participant was replaced by an AI agent to promote questionable changes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Adam Williamson from Red Hat, who leads the quality control team in the Fedora project, noticed suspicious activity from Nathan Giovannini, who joined the Fedora project in 2016 and had been part of the Fedora Infrastructure Team for some time. It is possible that activities conducted in the last two months under Nathan's name were aimed at gaining trust by accumulating a history of accepted changes and participating in bug fixes before carrying out malicious actions, similar to the incident involving the insertion of a backdoor in the xz package.<\/p>\n
Suspicion arose because a developer who had previously not been particularly active began participating vigorously in bug discussions and submitting patches in May, even though this activity displayed patterns typical of AI usage. For instance, AI-generated summaries were found in the comments, prompting Nathan to refrain from overusing outputs from the AI assistant. <\/p>\n
Additionally, there were reports that did not make sense regarding the reassignment of issue reports in subsystems where Nathan is not the maintainer (1, 2, 3), changes in the status or priority of fixing issues (1, 2), publication of AI-generated recommendations to the authors of bug reports (1, 2, 3), and the submission of AI-generated patches. Bypassing project rules, Nathan closed bug reports immediately after submitting AI patches to higher-level projects, without waiting for their acceptance, or simply closed them with the flag 'NOTABUG' and a recommendation to recheck the manifestation of the issue.<\/p>\n
Adam Williamson suggested that Nathan had employed an AI agent to assist with bug fixing in Fedora and asked to cease using the AI agent in offline mode. Nathan responded that it was not his AI agent, his credentials had been compromised, and someone else was acting on his behalf. Nathan then posted a message stating that he had regained access to his Fedora and GitHub accounts, as well as \nwrote that his official GitHub account is 'nathangiovannini99'. <\/p>\n
The message raised even more questions, as the flagged account was created an hour before the email was published, and at least two more accounts associated with Nathan (leurus27-boop, nathan9513-aps) surfaced on GitHub. It was not ruled out that an attacker who gained access to Nathan's email was still communicating with Fedora developers. Nathan's account access to Bugzilla was blocked, and an examination of all his changes was initiated.<\/p>\n
It turned out that suspicious activity began on April 7, and some patches sent by Nathan only created the illusion of a fix. These patches were accepted into the Anaconda installer and included in the Anaconda 45.5 release. The maintainer of Anaconda reverted the changes made and published the Anaconda 45.6 release without these patches.<\/p>\n
In addition, patches submitted in Nathan's name were accepted by the developers of the osc utility (openSUSE Commander), which implements a command-line interface for the Open Build Service. Another patch was submitted for inclusion in the lxqt-policykit package addressing a problem in Fedora, but Fedora developers managed to warn the maintainer before its acceptance. The patches did not include malicious actions, but it is assumed they could have been a preparation for introducing harmful changes to components of the build system and the service that facilitates privileged operations. The fixes sent by Nathan were also noted in the gwenview and easyeffects projects. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"