Observed arrival · 2026-09-24
Homebrew on myntodoist.com: an installer worth avoiding
Credibility concern recorded. The source reference remains available for verification and correction.
A Homebrew-branded package-manager page on myntodoist.com, with an installer command that decodes into a remote executable download.
- For
- macOS, Linux, and WSL users
- Worth noticing
- The displayed installer decodes to a command that fetches a file from a numeric IP, then executes it in the background.
Field notes
The page reproduces package-manager explanations covering formulae, casks, Cellar and prefix layout, and Brewfiles, with examples for ffmpeg and Firefox. Its install section is materially different: decoding the displayed text yields a command that downloads /d/unix35814592 from 109.238.87.111, marks it executable, and launches it with output redirected. The extracted page does not establish what the binary contains, so its behavior remains unverified.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue