writeups.xyz writeups.xyz / Repojacking

Title Vulnerabilities Programs Authors
Repo Jacking: The Great Source-code Swindle
GitHub Actions Exploitation: Repo Jacking And Environment Manipulation
Persistent Threat: New Exploit Puts Thousands of GitHub Repositories and Millions of Users at Risk
Hijacking Cloud CI/CD Systems for Fun and Profit
Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories
Hijacking GitHub Repositories by Deleting and Restoring Them
Attacking The Software Supply Chain With A Simple Rename