In the 30 years since #Java launched, there has only been 1 attack in which a Java project has been compromised to distribute malware that didn't involve #Minecraft. It turns out that even malware authors have taste.
As someone who has studied every supply-chain attack where an official upstream distribution point was compromised, that's my fun fact to share.
Thomas Strömberg
npub1mw…xvjjk
2026-09-18 02:18:46 UTC
Author Public Key
npub1mwgrtm0h3hnlfw9hvzqvhfchz9wzy2dvua0q6zr7lqwuxuu6hpms8xvjjkSeen on
wss://relay.momostr.pinkPublished at
2026-09-18 02:18:46 UTCEvent JSON
{
"id": "02f28917d49f3484ffbd8b2de90502d99a637da261c265437e7ea6d772f0080d",
"pubkey": "db9035edf78de7f4b8b76080cba717115c2229ace75e0d087ef81dc3739ab877",
"created_at": 1789697926,
"kind": 1,
"tags": [
[
"t",
"java"
],
[
"proxy",
"https://triangletoot.party/@thomrstrom/117289643327462090",
"web"
],
[
"t",
"minecraft"
],
[
"proxy",
"https://triangletoot.party/users/thomrstrom/statuses/117289643327462090",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://triangletoot.party/users/thomrstrom/statuses/117289643327462090",
"pink.momostr"
],
[
"-"
]
],
"content": "In the 30 years since #Java launched, there has only been 1 attack in which a Java project has been compromised to distribute malware that didn't involve #Minecraft. It turns out that even malware authors have taste.\n\nAs someone who has studied every supply-chain attack where an official upstream distribution point was compromised, that's my fun fact to share.",
"sig": "4064e32876b47e7b2068aee6987281a823d0fe47f2ecda8e30a353153ba71f5e55cb4ebe00bdb657765d590db37795d5bb789124b2d164471d470cbecd069411"
}