New

The latest blog posts to take off on Hacker News. 6,220 posts.

Any topic
2025
2459

Ghrc.io appears to be malicious

A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…