OpenMandriva Linux Project Bites Back After Attempted Sabotage
A disturbing incident has unfolded within the OpenMandriva Linux community, with a contributor accused of attempting to sabotage the project. The alleged attempt involved deleting crucial repositories and pushing an empty package that could have caused harm to users’ systems. What’s more concerning is that this act of attempted destruction was allegedly triggered by a dispute among contributors.
At the center of this controversy is Davide Beatrici, a leading developer of the popular instant messaging app Mumble. According to OpenMandriva developers, Beatrici had administrative privileges due to his previous work in migrating and mirroring project repositories to his private OneDev instance. It’s been reported that following a dispute over OpenMandriva’s focus on KDE and LXQt desktop environments, Beatrici took matters into his own hands.
Beatrici allegedly deleted part of a repository the OpenMandriva team had been working on for nearly a decade, as well as published an empty package in the Cooker repository that would have obsoleted packages for Gnome and Cosmic desktop environments. This was not only an attempt to disrupt the project but also posed a potential threat to users who might have installed these affected packages.
The OpenMandriva team is currently working on restoring the deleted repositories and conducting a thorough system audit to identify any other unauthorized changes. Interestingly, when contacted by BleepingComputer for his side of the story, Beatrici denied the sabotage claims, stating that his intention was never to harm the community or users. Instead, he claimed that his actions were motivated by a desire to address what he perceived as a serious issue within the project.
Beatrici’s statement raises questions about the dynamics at play within the OpenMandriva community and how disputes among contributors can escalate into attempts at sabotage. Despite the seriousness of Beatrici’s alleged actions, the OpenMandriva team has chosen not to pursue legal action against him, citing concerns that this might further damage the project.
The incident serves as a stark reminder of the importance of security within open-source projects and communities. With many contributors having administrative privileges and control over critical repositories, it’s crucial for these teams to implement robust measures to prevent internal sabotage attempts.
In light of this incident, it’s essential for all users and contributors to be vigilant about security best practices, especially when dealing with sensitive data or system-critical components. By regularly auditing and testing their systems, projects can minimize the risk of internal threats and ensure that their users’ trust is not compromised.
Source: Bleeping Computer — 2026-07-09