Skip to content

[Spawn]: Hashkey breakup #3458

Description

@dompipe

Link

https://openrouter.ai/labs/spawn/cli/install.sh

Why?

g0d77@g0d:/mnt/e/combat/play$ curl -fsSL https://openrouter.ai/labs/spawn/cli/install.sh | bash

spawn pi local
[spawn] bun not found or not working. Installing bun...
[spawn] bun installer hash mismatch — possible supply chain attack
[spawn] Expected: bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd
[spawn] Got: 04882bf41679d49d9af108657a1e5515bf04fdf2940d12c0d0b1e5d79dc53be8

The bun installer from bun.sh does not match the expected hash.
This could indicate a compromised CDN or DNS hijack.

If bun has released a new installer, please report this at:
https://github.com/OpenRouterLabs/spawn/issues
Command 'spawn' not found, did you mean:
command 'spaln' from deb spaln (2.4.13f+dfsg-1)
Try: sudo apt install
g0d77@g0d:/mnt/e/combat/play$

Metadata

Metadata

Assignees

No one assigned

    Labels

    agent-requestRequest for a new AI agentenhancementNew feature or requestpending-reviewIssue awaiting initial review

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions