Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub

arXiv:2403.04419v1 Announce Type: cross
Abstract: Are malicious repositories hiding under the educational label in GitHub? Recent studies have identified collections of GitHub repositories hosting malware source code with notable collaboration among the developers. Thus, analyzing GitHub repositories deserves inevitable attention due to its open-source nature providing easy access to malicious software code and artifacts. Here we leverage the capabilities of ChatGPT in a qualitative study to annotate an educational GitHub repository based on maliciousness of its metadata contents. Our contribution …

access arxiv attention code collaboration collections cs.cr cs.se developers easy educational exposing github github repositories hidden hosting malicious malware nature repositories risk source code studies under