31 August 2023 by Phillip Johnston • Last updated 29 February 2024RepoJacking is a type of Supply Chain Attack that GitHub repositories can become vulnerable to. RepoJacking can occur when a GitHub user or organization changes its name. GitHub automatically creates links between older names and newer names, such that any uses of the older names will redirect to the new one. This is done to prevent dependencies from breaking when a rename occurs. However, the previous user name or organization name can now be used by others. If a new user or organization is created with the old name, …
Continue reading “RepoJacking Vulnerability”
