GitHub Research Reveals Millions Vulnerable to RepoJacking

### Executive summary This research describes 'RepoJacking', a widespread GitHub dependency-repository hijacking technique where attackers claim previously used organization names and repositories (breaking redirects) to serve malicious code; the authors sampled GHTorrent data, found 36,983 vulnerable repositories in a 1% sample (≈2.95%), ran PoCs that resulted in code execution in some environments, presented real-world examples (Lyft, Google, VSCode extension), described bypasses to GitHub protections, and recommended mitigations such as retaining previous organization names and auditing links to external GitHub resources.