Re:Over 100k Infected Repos Found on GitHub
by arp242 on Thursday February 29, 2024 @08:34AM
(#39549078)
Not only that, millions of these type of repos get created, and the vast majority are caught and deleted. The article mentions this: "Most of the forked repos are quickly removed by GitHub, which identifies the automation. However, the automation detection seems to miss many repos, and the ones that were uploaded manually survive. Because the whole attack chain seems to be mostly automated on a large scale, the 1% that survive still amount to thousands of malicious repos."
[ Parent
| on HN ]
Re:Over 100k Infected Repos Found on GitHub
by mgii on Thursday February 29, 2024 @09:39AM
(#39549859)
Notice that as it seems, the vast majority are caught and deleted due to the intense automation, not the detection of malicious contents. If the actor was to run a smoother automation process, probably nothing would have been deleted. (disclaimer: author this article)