Top posts

Every blog post that took off on Hacker News, ranked by the votes of its best submission. 6,220 posts.

Any topic
2025
1179

Ghrc.io appears to be malicious

A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…