Skip to content

Commit 4cefe6f

Browse files
authored
fix: correct typosquatted org name in website install command (#259)
## Summary - Fix transposed org name `stmg-ai` → `smtg-ai` in the shell install command on the landing page (`web/src/app/page.tsx:68,70`) - Both the visible `<code>` element and the `CopyButton` `textToCopy` prop point to the wrong URL ## Context The curl install command on the website references `stmg-ai` (letters transposed) instead of the correct `smtg-ai`. The `stmg-ai` GitHub org does not currently exist, meaning anyone could register it, create a `claude-squad` repo with a malicious `install.sh`, and users copying the command from the site would pipe an attacker-controlled script into bash. Every other reference in the repository (README.md, install.sh, go.mod, layout.tsx, etc.) correctly uses `smtg-ai`.
1 parent a4d5e52 commit 4cefe6f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

web/src/app/page.tsx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -65,9 +65,9 @@ export default function Home() {
6565
<h3>Via Shell Script</h3>
6666
<div className={styles.codeBlockWrapper}>
6767
<pre className={styles.codeBlock}>
68-
<code>curl -fsSL https://raw.githubusercontent.com/stmg-ai/claude-squad/main/install.sh | bash</code>
68+
<code>curl -fsSL https://raw.githubusercontent.com/smtg-ai/claude-squad/main/install.sh | bash</code>
6969
</pre>
70-
<CopyButton textToCopy="curl -fsSL https://raw.githubusercontent.com/stmg-ai/claude-squad/main/install.sh | bash" />
70+
<CopyButton textToCopy="curl -fsSL https://raw.githubusercontent.com/smtg-ai/claude-squad/main/install.sh | bash" />
7171
</div>
7272
<p className={styles.prerequisites}>
7373
Prerequisites: tmux, gh (GitHub CLI)
@@ -90,4 +90,4 @@ export default function Home() {
9090
</footer>
9191
</div>
9292
);
93-
}
93+
}

0 commit comments

Comments
 (0)