Malicious Repos

Posts tagged with Malicious Repos.

How to Check a GitHub Repository for Malware Before You Run It

How to Check a GitHub Repository for Malware Before You Run It

Learn how to check a GitHub repo for malicious install scripts, hidden payloads, credential theft, obfuscated code, and suspicious downloads before you run it.

•9 min read
Sometimes the Repo Is the Attack: Malware Hidden Inside SVG Files

Sometimes the Repo Is the Attack: Malware Hidden Inside SVG Files

A fake freelancer sent me a real-looking Next.js project. Hidden inside its image files was a credential stealer set to run the moment I started the dev server. Here's the exact pattern — and how to check any repo before you run it.

•9 min read