19:26:47 <plowsof> This reminds me of that easy node garbage https://github.com/MrCrypPrivacy/qr_generator
19:27:35 <plowsof> The chefs kiss is the uploaded exe in releases
19:28:11 <plowsof> Size discrepancy of the  
19:29:47 <plowsof> Someone on reddit shared monerofx.com and i noticed some odd things there. This qr generator being one of them 
19:34:17 <elucidator> looks like the noob that cloned p2pool repo and named it similarly then uploaded malwared p2pool exe in the releases. which i reversed and shared my findings with sech1. it was an obfuscated vbscript malware + actual p2pool exe from official github releases. our reports got the repo removed in a short time.
19:36:16 <elucidator> from the forensics, looked like it was generated on a RU windows instance, which was a shame considering sech1 :D