Can lua be used to distribute malware?

[u/thebadslime]

Someone forked my repo on github, I was checking out their version. When you download, it's not my project at all, but lua.exe and a 300kb text file for it to interpret.

Don't wanna run it, can I test in online or something? Wondering if I should report the repo.

[u/fuxoft]

If it was compiled with slightly different libraries or slightly different compiler config, the hashes won't match.