Episode 419 – Malicious GitHub repositories

Josh and Kurt talk about an attack against GitHub where attackers are creating malicious repositories then artificially inflating the number of stars and forks. This is really a discussion about how can we try to find signal in all the noise of a massive ecosystem like GitHub. Show Notes

attack attackers can ecosystem find github github repositories josh malicious malware noise podcast repositories security signal stars supply chain try