News for hackers. Stuff that matters.

A comment on Over 100k Infected Repos Found on GitHub. Parent comment

Re:Over 100k Infected Repos Found on GitHub by simonw on Thursday February 29, 2024 @08:33AM (#39549074)
For public repos you can get an approximate number by querying various public datasets.

    SELECT uniqHLL12(repo_name) FROM github_events;
Against https://play.clickhouse.com/play?user=play#U0VMRUNUIHVuaXFIT... returns:

    361648383
[ Parent | on HN ]
Re:Over 100k Infected Repos Found on GitHub by jonnat on Thursday February 29, 2024 @09:52AM (#39550041)
They probably mean that the actual number of malicious repos is probably very hard to get.

The article reaches the 100K number by searching for repos with patches with a particular string contained in this specific attack, so it's likely missing many malicious repos that use different methods of infection.

[ Parent | on HN ]