Is this a supply-chain attack attempt?(github.com)

4 pointsby maratumba2 bulan yang lalu2 comments

https://github.com/CirclonGroup/angular-tree-component/issues/962

2 comments

maratumba2 bulan yang lalu

I was looking into the issues in this -probably- abandoned library and noticed this account helpfully offering to take over the project. The account has no other activity than this post after it's been created 5.5 months before. Seems like it could be a supply chain attack (or maybe just some LLM agent raising github stars).

Does github have a mechanism for flagging suspicious accounts? Reporting doesn't seem like the right idea without any actual wrong-doing.

1970-01-012 bulan yang lalu

Tree falls in woods, nobody cares, then somebody cares, and its bad? Just leave it. If they're granted a full repo without so much as a commit to back their reputation, we're all doomed.