OpenMandriva Accuses Contributor of Sabotaging Repositories Amid Dispute

Bleepingcomputer

OpenMandriva Accuses Contributor of Sabotaging Repositories Amid Dispute

First seen 9 Jul 2026, 22:57 UTC • •51.9

Article Content

1 / 8

Browse articles

ThreatCluster •July 10, 2026 at 00:58 UTC

•A former contributor allegedly sabotaged OpenMandriva by deleting repositories.
•The incident stemmed from community disputes and abusive behavior among contributors.
•OpenMandriva is restoring affected repositories and considering legal action.

OpenMandriva Linux reported an internal sabotage attempt by former contributor Davide Beatrici, who allegedly deleted parts of GitHub repositories and pushed an empty package that could disrupt user systems. This incident arose from a community dispute involving abusive behavior from another contributor, leading to several departures from the project. Beatrici had administrative access due to his role in migrating repositories to his private OneDev instance. The project is currently restoring deleted repositories and conducting a full system audit. OpenMandriva has considered legal action against Beatrici, citing criminal offenses, but has opted not to pursue it. The sabotage primarily affected the Cooker repository, which is used for development, limiting the impact to bleeding-edge users. The project aims to recover from this incident and reinforce its infrastructure.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 93d ago How this analysis works

Timeline

2026-07-09

OpenMandriva reports sabotage attempt

Davide Beatrici allegedly deleted GitHub repositories and pushed an empty package after a community dispute.

Bleepingcomputer

2026-07-09

OpenMandriva initiates restoration efforts

The OpenMandriva team began restoring deleted repositories and conducting a full system audit.

2026-07-09

Beatrici rejects sabotage claims

Davide Beatrici stated his actions were not intended to harm the project, citing disagreements with project focus.

Bleepingcomputer

More articles in this cluster (7)

Threat Graph

8 entities, 9 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
T1068 - Exploitation for Privilege Escalation

Organization (3)

OpenMandriva
OpenMandriva Association
OpenMandriva Linux Project

Affected Platform (3)

GitHub
Linux
OneDev

Relationships

Malware targets GitHub
Malware targets Linux
Malware targets OneDev
T1068 - Exploitation for Privilege Escalation targets GitHub
T1068 - Exploitation for Privilege Escalation targets Linux
T1068 - Exploitation for Privilege Escalation targets OneDev
Malware related to OpenMandriva
Malware related to OpenMandriva Association
Malware related to OpenMandriva Linux Project

Following this threat?

Track OpenMandriva in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…