# Third-party plugin repository hijacked

**URL:** <https://meta.discourse.org/t/third-party-plugin-repository-hijacked/374703>\
**Category:** Product Support\
**Created:** [July 17, 2025, 8:37pm UTC](https://meta.discourse.org/t/third-party-plugin-repository-hijacked/374703 "2025-07-17T20:37:56Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)\
**Post date:** [July 22, 2025, 5:58am UTC](https://meta.discourse.org/t/third-party-plugin-repository-hijacked/374703/12 "2025-07-22T05:58:25Z")

</div>

Thank you for your apologies.

The next not-so responsible thing was not reaching out to me or CDCK privately when you gave up the handle, because in the past three hours, someone else could have seen your post and registered it.

I have now regained control over the old Github handle. And thank you for doing the right thing eventually, and for pointing out that Github does not protect redirects anymore for the **fifth** time (last time was the fourth time: [“This discovery marks the fourth time an alternate method has been identified for performing Repojacking”](https://checkmarx.com/blog/persistent-threat-new-exploit-puts-thousands-of-github-repositories-and-millions-of-users-at-risk/))

I suggest you approach Github and collect your bounty!

---

_[View the full topic](https://meta.discourse.org/t/third-party-plugin-repository-hijacked/374703)._
