Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed.
This includes repositories from organizations such as Google, Lyft, and several others, Massachusetts-based cloud-native security firm Aqua said in a Wednesday report.
The supply chain vulnerability, also known as dependency repository hijacking, is a class of attacks that

alert aqua attack called cloud cloud-native cloud-native security dependency github github repositories google lyft massachusetts organizations repojacking report repositories repository security software study supply supply chain supply chain vulnerability vulnerability vulnerable