AI agent tool `Get Shit Done` (GSD) abandoned after creator's rug-pull scam; immediate migration required
The creator retains NPM publish rights, posing a critical security risk through malicious updates. Immediately uninstall old packages and migrate to the community fork get-shit-done-redux.
- The creator executed a "rug pull" with the associated
$GSDcrypto token and vanished. Do not trust any repos from this developer. - The original NPM packages (
get-shit-done-cc,@gsd-build/sdk) could receive a malicious update at any time, a high-risk vector given the tool's shell access. - The community has forked the project to
open-gsd/get-shit-done-reduxafter a security audit. Uninstall the old packages and reinstall using the new one.