7c0340519ce112653b59411706845e0ccfec693d
Investigated recent Telegram alerts - no intrusion, both new hits trace to benign one-offs: calibre's linuxserver.io s6-init NOPASSWD setup (same pattern already whitelisted for obsidian) and lsyncd truncating its own status log (not evidence-clearing).
docker-infrastructure
Languages
Shell
58.2%
Python
28%
JavaScript
10.5%
HTML
2.3%
DIGITAL Command Language
0.6%
Other
0.4%