News for hackers. Stuff that matters.

A comment on Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Repositories. Parent comment

Re:Glassworm Is Back: A New Wave of Invisible Unicode Attack... by mmlb on Sunday March 15, 2026 @05:04PM (#47391902)
In this instance the PR that was merged was from 6 years ago and was clear https://github.com/pedronauck/reworm/pull/28. Looks to me like a force push overwrote the commit that now exists in history since it was done 6y later.
[ Parent | on HN ]
Re:Glassworm Is Back: A New Wave of Invisible Unicode Attack... by globular-toast on Monday March 16, 2026 @02:32AM (#47395751)
So who force pushed and why?
[ Parent | on HN ]
Re:Glassworm Is Back: A New Wave of Invisible Unicode Attack... by retropragma on Monday March 16, 2026 @09:27PM (#47407473)
likely a compromised github API token
[ Parent | on HN ]