Semgrep Rule That Identifies GitHub Repo Confusion Attack IOCs

Show HN: Semgrep Rule That Identifies GitHub Repo Confusion Attack IOCs

Operating in show hn launch, Semgrep Rule That Identifies GitHub Repo Confusion Attack IOCs operates.

Profile

My name is Nir! I am one of the three co-founders of arnica.io.I’ve worn many hats in cyber security over the years – sys admin, pen-tester, security architect, and Chief Information Security Officer (CISO). What really gets me excited about my work is making security easy and effective for developers and ops teams! In my last role, at one of the top 3 FinTechs, following the attack against Solarwinds, the CEO asked me what we are doing to secure our software supply chain. I met with 15+ vendors, did a few POCs, but unfortunately each solution either increased operational cost or was too narrow in scope. I really wanted to buy a solution instead building it, but even the ones that hit the sh

Within the show hn launch space, the company focuses on its core offering rather than a broad product line.

Its current recorded stage is Show HN launch.

Website: www.arnica.io/blog/malicious-code-campaign-on-github-repos