Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats

Bifrost
Bifrost

asset-group/ghostcommit

PoC for GhostCommit Attack: Steal secrets via a pull request pointing to an image

Visit GitHub
Python
32
2
3 contributors
MIT License
website
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast asset-group/ghostcommit is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Jul 2026 – Nov 2026

Stars +32 in 5 months

0102030
27

Forks +2 in 5 months

012
2

Merged PRs 1 in 5 months

01
1

Trendshift Trendingthe best rank each month, on any day it made the top 25

Not in the Trendshift top 25 in this period

Jul 2026Aug 2026Sep 2026Oct 2026Nov 2026
The left and right arrow keys step from month to month; Home and End go to the first and the last

Stars, forks, merged pull requests and best Trendshift Trending rank, by month
MonthStars gainedForks gainedMerged PRs
July 2026+27+20
August 2026+4+01
September 2026+1+00
October 2026+0+00
November 2026+0+00
Total+32+21
  • 1#1 on the list
  • 7Best rank that month
  • Not trending

Social mentions

Recent discussions about this repository across the web
  1. Jul 131 post
    • GhostCommit Attack

      Read full on Hacker News

      Hacker News

  2. Jul 111 post
    • GhostCommit – Convention-File Steganographic Exfiltration (Attack PoC)

      Read full on Hacker News

      Hacker News

You might also like

Repositories close to asset-group/ghostcommit
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

AdnaneKhan/Cacheract

TypeScript

GitHub Actions Cache Native Malware - for Educational and Research Purposes only.

17312

v12-security/pocs

C

poc it like it's hot

1.1k190

SWE-agent/SWE-agent

Python

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

20.7k2.4k

jmxt3/gitscape.ai

Python

Scan any agent skill — authored or compiled — for prompt injection, secrets, and malicious execution before it touches your agent. Or compile the long tail on the fly.

323

offense-research/offense

JavaScript

OpenRouter for agent security.

631

superagent-ai/skills

Python

A collection of security skills

8013

github/securitylab

C

Resources related to GitHub Security Lab

1.6k304

IgorGanapolsky/ThumbGate

JavaScript

ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.

298

AdnaneKhan/gato-x

Python

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

59459