Malware clones of this repository found in the wild

[fujiokayu]

I was searching for malware that copied OSS using GitHub code search, and I found what seems to be a fake of this repository.

The implementation is almost a copy, but it contains malicious execution commands.
https://github.com/windingecono/oversight/blob/db6c6bea79c7d268fbe303b9a8a090231cb5fcfd/child_process.go#L163

If necessary, please contact GitHub.

[ucirello]

Thank you for the report @fujiokayu -- I reported it to Github.

[ucirello]

All these forks have the same malware.

subduedsumme/oversight@db6c6be/child_process.go#L163
suddenmarbl/oversight@db6c6be/child_process.go#L163
sunnyexcite/oversight@db6c6be/child_process.go#L163
superelimin/oversight@db6c6be/child_process.go#L163
surefootedphi/oversight@db6c6be/child_process.go#L163
sveltefedera/oversight@db6c6be/child_process.go#L163
sweetpriest/oversight@db6c6be/child_process.go#L163
tangiblecon/oversight@db6c6be/child_process.go#L163
tastylegiti/oversight@db6c6be/child_process.go#L163
tauttale/oversight@db6c6be/child_process.go#L163
teemingsepa/oversight@db6c6be/child_process.go#L163

[ucirello]

More malware clones found:

https://github.com/stridenttrit/oversight
https://github.com/focusedstam/oversight
https://github.com/forsakenomi/oversight
https://github.com/fragrantchale/oversight
https://github.com/Frenchbrush/oversight
https://github.com/frighteningel/oversight
https://github.com/frighteningel/oversight
https://github.com/frighteningel/oversight
https://github.com/generalsnob/oversight
https://github.com/gentlefreight/oversight
https://github.com/giddyhound/oversight
https://github.com/glamorouspr/oversight
https://github.com/glassmaking/oversight

[ucirello]

More malware clones found:
https://github.com/flawlessepox/oversight/blob/master/child_process.go#L163-L172