Repo Jacking - How GitHub Exposes Over 70,000 Projects to Remote Code Injection

Explore the critical security vulnerability of Repo Jacking in this 36-minute conference talk from BSidesLV 2021. Delve into how GitHub inadvertently exposes over 70,000 projects to remote code injection, potentially compromising the integrity of countless software applications. Learn about the mechanics of this exploit, its far-reaching implications, and potential mitigation strategies. Gain valuable insights into the importance of secure repository management and the unintended consequences of certain GitHub features. Essential viewing for developers, security professionals, and anyone involved in open-source project management.