This is awesome, our very talented security engineer Indiana Moreau wrote this up at @SecInnovation! I love to see this research getting out!
Repo Jacking: Exploiting the Dependency Supply Chain on GithubView quoted post on X
blog.securityinnovation.com/repo-jacking-e…