Tell HN: Publicly editable GitHub wikis can be abused to distribute malware

• vundle

  29 23,812 1.0 Vim Script

  Vundle, the plug-in manager for Vim

  

For example, a link to Git for Windows on Vundle's wiki was replaced with a link to malware:

https://github.com/VundleVim/Vundle.vim/wiki/Vundle-for-Windows/_compare/3aeb22ac39229af4312f2be1052ead184dd5b54d...aa3d293dd18ae1cb4f049c43b73b951651515863

In fact, all five recent edits, made by three different accounts, were malicious:

https://github.com/VundleVim/Vundle.vim/wiki/Vundle-for-Windows/_history

I recommend restricting editing in your GitHub wikis to collaborators only.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project