CIRCLE WITH A DOT

https://github.com/frenchfounder / hypercommit[.]com looks suspiciously like a supply chain attacker, trying to get around the fact that workflows are only disabled for first time contributors [1]

Either this, or they're just spamming hundreds and hundreds of repos

They've no prior contributing history to anything, and all their profiles/etc are blank. One to watch out for given all the attacks against #github #repos at the moment

#threatIntel #threatIntelligence #OSInt #hyperCommit

[1] https://github.blog/changelog/2021-04-22-github-actions-maintainers-must-approve-first-time-contributor-workflow-runs/

@GossiTheDog got a link to how to fix this (for zoom at least based on the article?)

@varx @mttaggart official containers are thought to be unaffected (as of 16:03UTC )

@jpoesen I'd love to know too in London UK

@mttaggart @ai6yr ISO27001 is enough of a pain about physical security without you giving them ideas(!)

@magsol mind asking geographic requirements to the toot? Was going to send this to some European folks until I realised it was USA only