If you've ever typoed ghcr to ghrc, particularly with a "docker login" or any automation that performs a login to the container registry, I'm seeing a strong indication that your GitHub credentials have been leaked to a malicious actor.

https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/

#docker #container #registry#OCI #security

If you've ever typoed ghcr to ghrc, particularly with a "docker login" or any automation that performs a login to the container registry, I'm seeing a strong indication that your GitHub credentials have been leaked to a malicious actor.

https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/

#docker #container #registry#OCI #security