Tag: GitHub rulesets
-
Shadow Commits: The Stealthy “Force Push” Attack That Compromised Plone’s GitHub Repositories
A stealthy security breach has compromised one of the most prominent open-source content management projects. An anonymous adversary surreptitiously injected malicious code into several GitHub repositories by forcibly overwriting the commit history—a maneuver where many of the alterations appeared ostensibly benign, thus evading immediate suspicion. The Plone project collective reported that the incursion was unearthed…