Millions of GitHub Repositories Vulnerable to Repo Jacking

Google, Lyft Among Vulnerable Repositories, Aqua Researchers Say
Millions of GitHub repositories are vulnerable to a repository renaming flaw that that could enable supply chain attacks, a new report by security firm Aqua said. They found 36,983 GitHub repositories vulnerable to repo jacking attacks including Google and Lyft.

aqua attacks enable flaw github github repositories google lyft repo report repositories repository researchers security supply supply chain supply chain attacks vulnerable