3 ms·
Someone copied our GitHub project, added stars, and injected malicious code
- deleted 2y ago[deleted]
- Gys 2y agoI made a simple scanner to see if any package in a project is accessing the shell: https://github.com/Gys/cmdscanner https://github.com/Gys/cmdscanner
- t_believ-er873 2y agoRecently there have also been posts on that issue in other communities. Not to be tricked by this scheme, it's worth regularly searching for copies of the public repositories. Then, if any of the malicious clones are found, report them to GitHub.