Tag: GitHub
All the articles with the tag "GitHub".
Open source doesn't mean audited: the backdoor in an interview project
A poisoned interview repo hid its backdoor in .vscode settings. The bigger lesson: open source guarantees you may audit the code, not that anyone has. For small unknown projects, a disposable fake repo faces almost none of the restraints a named vendor does.
