The Crypto Coin was the tell – thoughts on GSD, and it's crypto rugpull
The creator of the $GSD crypto token has rug-pulled the project, disappearing after draining funds from investors. The npm packages associated with the project still allow the creator to publish updates, posing a security risk. The community has since forked the project to create a safer alternative, but concerns about trust and accountability remain.
- ▪The original creator of the $GSD token vanished after draining funds from investors.
- ▪He still retains publish access to npm packages, which could pose security risks.
- ▪The community has forked the project to create a safer alternative called get-shit-done-redux.
Opening excerpt (first ~120 words) tap to expand
Home » PostsThe Crypto Coin Was the TellMay 23, 2026 · 4 minTL;DRGSD's creator rug-pulled and vanished. He still has NPM publish access to packages with deep shell permissions on your machine. What to do and what it means.If you have the Get Shit Done npm package installed, uninstall it today.The original creator launched a $GSD crypto token, drained it once enough people bought in, deleted his social accounts, and disappeared. The community forked the project overnight to get-shit-done-redux and did a security audit. That part is being handled.The part that is still a problem: he still has publish access to the original npm packages, and nothing in the npm registry revokes credentials when someone vanishes. GSD agents run with deep shell and bash permissions on your local machine.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Vexjoy.
Discussion
0 commentsMore from Vexjoy
