Potentially dangerous fork?

[iyanmv]

Hello,

By luck I recently found this fork: https://github.com/atcions/checkout

Notice the typo: actions -> atcions

I guess that repo could be used in the future to launch a supply chain attack.

GitHub should, perhaps, block all names close enough to "actions" like "atcions", "aactions", etc. and redirect them to the genuine and verified organization: https://github.com/actions

[iyanmv]

ping @GrantBirki

[GrantBirki]

👋 Hey @iyanmv, I'll forward this over to our trust and safety team and have them evaluate.

[DhavalGojiya]

The interesting thing is, they even faked the contributors section. Lol.

[iyanmv]

The interesting thing is, they even faked the contributors section. Lol.

That's because he didn't do a fork in the usual way. He manually cloned the repo and uploaded it as a new repo. Then, in that case, GitHub automatically adds the contributors view when there are multiple people with public commits.

[DhavalGojiya]

The interesting thing is, they even faked the contributors section. Lol.

That's because he didn't do a fork in the usual way. He manually cloned the repo and uploaded it as a new repo. Then GitHub automatically add the contributors view when there are multiple people with public commits.

Understood, Thanks.

[iyanmv]

Looks like the repo and the user got taken down. @GrantBirki was this the outcome of the safety team having a look? Or just a coincidence?