GitHub actions disabled due to malicious PR

↧

GitHub actions disabled due to malicious PR

April 4, 2021, 8:06 am

I very recently received a malicious PR that looks like a cryptocurrency miner abuse. At first, I only closed the issue not knowing that the actions in the malicious PR would run. After realising that...

View Article

GitHub actions disabled due to malicious PR

April 4, 2021, 7:57 pm

I’d contact GitHub support at https://support.github.com/contact and talk to them about this. Read full topic

View Article

GitHub actions disabled due to malicious PR

April 5, 2021, 5:53 am

Those who’re here because of the miner’s attacks, here’s my approach: Lock the conversation. (otherwise, the miner will reopen the PR) Block the user. (so that no more PRs could be opened) Cancel...

View Article

GitHub actions disabled due to malicious PR

April 5, 2021, 5:59 am

Thanks for your answers. I’ve contacted GitHub support. In my case, I’ve also limited the PR for new accounts since I’ve had another similar PR, a few hours later, from another throwaway account. Read...

View Article