Commit 4cefe6f
authored
fix: correct typosquatted org name in website install command (#259)
## Summary
- Fix transposed org name `stmg-ai` → `smtg-ai` in the shell install
command on the landing page (`web/src/app/page.tsx:68,70`)
- Both the visible `<code>` element and the `CopyButton` `textToCopy`
prop point to the wrong URL
## Context
The curl install command on the website references `stmg-ai` (letters
transposed) instead of the correct `smtg-ai`. The `stmg-ai` GitHub org
does not currently exist, meaning anyone could register it, create a
`claude-squad` repo with a
malicious `install.sh`, and users copying the command from the site
would pipe an attacker-controlled script into bash.
Every other reference in the repository (README.md, install.sh, go.mod,
layout.tsx, etc.) correctly uses `smtg-ai`.1 parent a4d5e52 commit 4cefe6f
1 file changed
+3
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
65 | 65 | | |
66 | 66 | | |
67 | 67 | | |
68 | | - | |
| 68 | + | |
69 | 69 | | |
70 | | - | |
| 70 | + | |
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
| |||
90 | 90 | | |
91 | 91 | | |
92 | 92 | | |
93 | | - | |
| 93 | + | |
0 commit comments