Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
More on Repositories
Other advisories
- Not ratedosv:CVE-2026-118504Gitea issue changes on archived repositories through the API
- Not ratedosv:CLEANSTART-2026-JE26969go command may execute unexpected commands when operating in untrusted VCS repositories
- Not ratedosv:CLEANSTART-2026-XI62926go command may execute unexpected commands when operating in untrusted VCS repositories
- Mediumghsa:GHSA-fgxm-5hvv-x4vhcharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
- Not ratedosv:GHSA-fgxm-5hvv-x4vhcharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
- Not ratedosv:CLEANSTART-2026-ZX56372go command may execute unexpected commands when operating in untrusted VCS repositories
- Not ratedosv:CVE-2026-109844Gitea watched repositories API disclosure after access revocation
- Not ratedosv:CVE-2026-105661Gitea panic on the repositories route of individual users
Other news entries
- 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee RepositoriesNewsThe Hacker News
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAIBreachpwn.watch
- 'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsNewsDark Reading
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesNewsThe Hacker News
Source: https://thehackernews.com/2026/09/placeholder-third-partycom-referenced.html
ID