He's referring to [`da5c4507`](https://github.com/WalletWasabi/WalletWasabi/commit/da5c4507e9f2149ca651d9b5db2844596442ab11).

```bash
git log -L /OpenBrowserAsync/:WalletWasabi/Helpers/IoHelpers.cs
```

is your friend.

```console
$ git show --pretty=raw da5c4507
commit da5c4507e9f2149ca651d9b5db2844596442ab11
tree 7c54c9d9f9e017ad99624f49d149dbdad93da669
parent e0ed06bae08809f32746a36a132b600630b18cbe
author wd <noreply@email.com> 1708001726 +0000
committer Wiesław Šoltés <wieslawsoltes@users.noreply.github.com> 1708354759 +0100

    fix opening browser on macos.

[..]

$ date -u --iso-8601=seconds -d @1708354759
2024-02-19T14:59:19+00:00
```

Doesn't mean it's malicious per se though: `noreply@email.com` is a dummy author email and the committer is anyway the last person to touch it. As it doesn't have a signature, there is no valid evidence in any way that anyone mentioned here did this in the first place, so whatevs. Bugs happen. Glad it is fixed.

optimism

https://twiiit.com/Kruwed/status/2088301854522257453

nitter

It got popular because LaurentMT turned it into a hoax by claiming some anonymous dev introduced the bug and then scrubbed their account: 

But he immediately fucked up when fabricating the "evidence" of the disappearing dev from Feb 2024: The coordinator string feature wasn't even added until June 2024 - 

bitcoin

Coinjoins

WasabiWallet OS command injection in URL opener via Read More link

m0wer

It got popular because LaurentMT turned it into a hoax by claiming some anonymous dev introduced the bug and then scrubbed their account: https://x.com/Kruwed/status/2088301854522257453

But he immediately fucked up when fabricating the "evidence" of the disappearing dev from Feb 2024: The coordinator string feature wasn't even added until June 2024 - https://github.com/WalletWasabi/WalletWasabi/pull/13190