🧰 Forgejo

The items that name it 4

• SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
  writeupas tools2026-07-19

  Attacker-controlled Git hosting instance (git.disroot.org) used as the command-and-control host to serve the second-stage payload (deploy.sh and the daemon binary); attacker registered a username impersonating an official ecosystem account.

• SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
  writeupas tools2026-07-19

  Public git hosting instance (git.disroot.org) where the attacker registered the 'git-ecosystem' username and hosted malicious binaries/repositories used to make the payload host look legitimate.

• Orca Security: Gitea Container Registry Exposes Private Images to Unauthenticated Attackers
  writeupas affected products2026-05-27

  community fork of Gitea that shares the same container registry implementation; independently confirmed vulnerable through testing by the discovering researchers

• IDP Zero-Dollar
  repoas tools2026-05-13

  Self-hosted Git hosting and CI runner for the platform's source and pipelines