New

The latest blog posts to take off on Hacker News. 80,833 posts.

Any topic
Any year
8390

Ghrc.io appears to be malicious

A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…