News for hackers. Stuff that matters.
Re:Malicious code added to 35k GitHub repos, leaking user en... by szundi on Wednesday August 03, 2022 @02:05AM (#32328163)
I like it, although raises the bar for contributors to join.

Also does not help that enough percentage of repo owners would accept then signed PRs to their projects.

The fake accounts can be created with gpg signed fake commits too.

There are no comments on this comment yet.