GitHub comments used to distribute malware (BleepingComputer)

Posted Apr 25, 2024 9:02 UTC (Thu) by Karellen (subscriber, #67644)
In reply to: GitHub comments used to distribute malware (BleepingComputer) by taladar
Parent article: GitHub comments used to distribute malware (BleepingComputer)

If people can't access the "post a comment" UI for a repo, how are they going to upload a file associated with a comment to it?

Posted Apr 25, 2024 9:08 UTC (Thu) by NAR (subscriber, #1313) [Link]

Exactly, how are they going to upload e.g. a screenshot for a comment? Which is really useful for GUIs...

Posted Apr 25, 2024 10:00 UTC (Thu) by sidcha (subscriber, #153938) [Link]

They (attacker) would just use another project that allows comments.