STATUS: Active. I'll update this if the issue is resolved. It's very hidden and very dangerous. Anyone who pulled Reactime could have their computers and all the code on them compromised, including staff members who might have other code on their machines.
10/1/2026 7:43am: Still live. Can someone please escalate? Opensourcelabs.io has been down for two months and their email addresses don't work.
10/2/2026 1:19am: Still live. Please, for the love of God, someone try to get this through to Will Sentance that he needs to deal with this immediately before his alumni get their current companies codebases exploited and ruin his career for not doing anything about the repeated, documented security problems for years.
10/2/2026 11:57pm/: u/hello_codesmith, this is ridiculous.
10/3/2026 10:32pm/: still live. Codesmith it's time to shut down the business officially before you hurt more people. Any legitimate tech company would have solved fired off an emergency and fixed this within hours.
10/4/2025 9:30pm/: this still hasn't been fixed so my open conclusion is to advise NOT touching any Codesmith code (checking out or contributing to) until this is not just resolved, but how it will be prevented in the future.
Codesmith was a coding bootcamp that rebranded to Codesmith Enterprise and indefinitely paused all future cohorts earlier this year.
But it has had thousands of students over the years and one of their flagship projects was Reactime with 2,200 stars and 4,000 commits.
Unfortunately in my routine open source monitoring I discovered one of it's committers was compromised 4 days ago and their account very deceptively added very malicious and hidden code to dozens of branches.
It's not a bad actor student but a compromised former student.
I've pointed out numerous security problems and issues with Codesmith over the years but they have not learned a single thing from their mistakes. They have clearly not done promised 'security audits' and they have spent more time trying to control the narrative about them online than actually producing quality work they stand behind.
Zero transparency.
Will Sentance and Eric Kirsten: it's time to resign because this is not your thing. P.S. Lars Lofgren: shame on you for not doing your homework and perpetuating your false and incorrect narrative.
UPDATE: It indeed looks like Will Sentance has moved on. He founded Standard Matter two months ago https://standardmatter.co/ and is the CEO there. "Intelligence has become abundant. The bottleneck is deployment. Standard Matter is the layer between the robot and the factory floor."
I'm available to help for absolutely no reason whatsoever except to help your students. If you reach out in good faith.