← Back to issue list

Malicious namesquatting of snaps

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1804957
Type
issue
State
open
Author
~buzz--
Labels
—
Created
Updated
Closed
—

Current evaluation

Complaint that an unverified publisher holding the 'bitcoin' snap name pushes outdated software, calling for stronger store name/publisher vetting; out of scope for the snapcraft build tool

Suggested action: close not a bug

Reason: This is a Snap Store governance/trust complaint about name reservation and publisher verification, not a snapcraft defect: grepping the repository for 'namesquat'/'squat' returns no matches and there is no code path in this tool that controls who can register a snap name or what a publisher ships (store interaction is delegated to Craft Store for auth/upload only). The reporter's follow-up concedes it is 'not specifically about the -package-' issue but a general argument about 'quality control of ubuntu snaps', i.e. a policy request with no reproducible failure, and no maintainer ever picked it up. It should be routed to the Snap Store team rather than resolved here; if the store team later ships name-dispute or verified-publisher enforcement, it would be tracked in the store's own tracker.

Evaluated by: mr-cal-bot

Impact: 28 Quick Win: 1 Complexity: 85 Confidence: 58 Actionability: 15

Issue body

The user who squatted the 'bitcoin' snapname is forcing incompatible and greatly outdated software to users leading to incompatibility and lost money.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 28
Quick Win: 1
Complexity: 85
Confidence: 58
Actionability: 15
close not a bug Complaint that an unverified publisher holding the 'bitcoin' snap name pushes outdated software, calling for stronger store name/publisher vetting; out of scope for the snapcraft build tool
stealth/space-bunny-alpha
Impact: 22
Quick Win: 1
Complexity: 72
Confidence: 66
Actionability: 15
needs triage Complaint that a third party publisher squatted the 'bitcoin' snap name with outdated software, urging store-side namesquat/name verification policy; no labels, no maintainer response, only author follow-ups.
stealth/space-bunny-alpha
Impact: 32
Quick Win: 1
Complexity: 82
Confidence: 66
Actionability: 22
close not a bug Complaint that the publisher of the 'bitcoin' snap squatting an established name forces outdated/insecure software on users; an escalation about Snap Store name-reservation and review policy, not a snapcraft code defect. No maintainer reply.
stealth/space-bunny-alpha
Impact: 48
Quick Win: 5
Complexity: 62
Confidence: 94
Actionability: 30
needs triage An unlabelled report alleges that the bitcoin snap's publisher is forcing outdated, incompatible software that caused lost money. It has no examples, maintainer response, or action taken.
qwen/qwen3.8-27b
Impact: 20
Quick Win: 18
Staleness: 100
Complexity: 10
Confidence: 75
Support Request: 50
close not a bug Complaint that a user squatted the 'bitcoin' snap name and is forcing outdated, incompatible software on users. No labels, no comments, no maintainer activity in ~7.8 years. A store policy/moderation concern, not a snapcraft tool defect.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 30
Confidence: 90
Support Request: 10
close stale Report of malicious namesquatting on the 'bitcoin' snapname causing outdated software distribution and user harm. Unaddressed for over 7 years with no maintainer interaction.
qwen/qwen3.6-35b-a3b
Staleness: 100
Complexity: 10
Confidence: 95
Support Request: 80
close stale Complaint regarding malicious namesquatting of the 'bitcoin' snapname, claiming it forces outdated software. The issue is over 7 years old with zero comments or maintainer interaction, indicating it is highly outdated and irrelevant.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 35
Confidence: 80
Support Request: 25
close stale Report of malicious namesquatting on the 'bitcoin' snapname causing users to receive outdated software. Unaddressed for over 7 years with zero maintainer interaction or comments.

Update history

Date Change
created

Related issues

No related issues found above the similarity threshold.