
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
www.github.com/gitblit/gitblit.git
Advanced tools
Gitblit is an open source, pure Java Git solution for managing, viewing, and serving Git repositories. It can serve repositories over the GIT, HTTP, and SSH transports; it can authenticate against multiple providers; and it allows you to get up-and-running with an attractive, capable Git server in less than 5 minutes.
More information about Gitblit can be found here.
Gitblit is distributed under the terms of the Apache Software Foundation license, version 2.0. The text of the license is included in the file LICENSE in the root of the project.
Gitblit requires at Java 7 Runtime Environment (JRE) or a Java 7 Development Kit (JDK).
| Source | Location |
|---|---|
| Documentation | Gitblit website |
| Forums | Google Groups |
| @gitblit or @jamesmoger | |
| Google+ | +gitblit or +jamesmoger |
GitHub pull requests are preferred. Any contributions must be distributed under the terms of the Apache Software Foundation license, version 2.0.
Gitblit uses submodules.
Make sure to clone using --recursive OR to execute git submodule update --init --recursive.
Eclipse is recommended for development as the project settings are preconfigured.
build.xml script in the project root.
This will download all necessary build dependencies and will also generate the Keys class for accessing settings.com.gitblit.tests.GitBlitSuite test suite.
This will clone some repositories from the web and run through the unit tests.MX_COLOR environment variable before executing Ant.set MX_COLOR=true
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.