Brandon Mitchell personal blog
Ghrc.io appears to be malicious
A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…
- Points
- 408
- HN comments
- 73
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyOpen Source2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Aug 24, 2025 | Ghrc.io appears to be malicious by todsacerdoti | 408 | 73 |
