GitHub Archives

AppWizard

July 25, 2026

Govt orders GitHub to remove code for internet-free messaging app

The Indian Cyber Crime Coordination Centre (I4C) has directed GitHub to remove three repositories associated with the Bitchat messaging application, co-founded by Jack Dorsey. This action is one of the first implementations of the amended IT Rules' "reasoned intimation" mechanism, extending the takedown framework to software repositories. I4C expressed concerns about Bitchat's potential misuse for unlawful activities such as coordinating unlawful assemblies, inciting violent protests, disseminating misinformation, radicalization, and criminal conspiracies. The application allows for anonymous communication without user registration or centralized logging, complicating law enforcement's ability to conduct lawful interception and investigations.

AppWizard

July 25, 2026

Amid youth protests, Centre directs blocking of messaging app that works without internet: Developer

The Union Home Ministry has requested GitHub to remove repositories related to Bitchat, a Bluetooth-based messaging app that functions without internet connectivity, due to security concerns amid protests in central Delhi. Jack Dorsey, co-founder of Twitter, shared the directive, which aims to suppress the availability of such technologies. The Indian Cybercrime Coordination Centre has expressed worries that decentralized communication tools like Bitchat could be misused for unlawful activities. The directive, issued under Section 79(3)(b) of the Information Technology Act, 2000, requires GitHub to disable access to three Bitchat-related repositories within three hours. The Internet Freedom Foundation criticized the government's lack of transparency and argued that concerns about potential misuse do not justify banning access to the app's code. The protests, initiated by the Cockroach Janta Party, are demanding the resignation of Union Education Minister Dharmendra Pradhan over alleged mismanagement of competitive examinations, with increased support following police actions against demonstrators.

AppWizard

July 25, 2026

GitHub ordered to remove decentralized messaging app Bitchat in India

India's Ministry of Home Affairs has ordered GitHub to remove repositories related to Jack Dorsey's Bitchat application, citing concerns that the platform could allow users to bypass internet shutdowns and evade surveillance. The directive targets the software itself rather than specific unlawful content, referencing Section 79(3)(b) of the Information Technology Act, 2000, and requires compliance within three hours to avoid legal repercussions for GitHub. The repositories in question are: - github.com/permissionlesstech/bitchat - github.com/permissionlesstech/bitchat-android - github.com/permissionlesstech/bitchat-android/releases Bitchat is a decentralized messaging app that operates over Bluetooth mesh networks, which does not require internet access and facilitates anonymous communication. The app's design includes features like end-to-end encryption and no mandatory user registration. The Indian Cyber Crime Coordination Centre (I4C) claims the app could be misused for illegal activities and cites local laws as justification for the takedown. The order comes amid ongoing protests in New Delhi, where internet access has been suspended. The Internet Freedom Foundation has criticized the order as unconstitutional and has called for its retraction. It is currently unclear if GitHub will comply with the takedown request.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 24, 2026

I replaced my old Android Auto sideloading method with this, and it’s so much easier

The process of sideloading apps for Android Auto can be complex due to varying permissions by device and app. Users often face issues with platforms like Android Auto Apps Download (AAAD), which may go offline. Some beneficial sideloaded apps include AABrowser for internet browsing and CarStream for watching YouTube. A new sideloading method allows users to bypass AAAD, ensuring app icons appear in the vehicle's infotainment system. This method was effective on a Pixel 10 Pro running Android 17 without being rooted, but results may vary on other devices. To enable this method, users must activate Developer Mode on their Android device and Android Auto. It is important to install apps from reputable sources, such as GitHub, as recent updates to Android Auto may remove sideloaded apps that circumvent restrictions. After enabling the Unknown Sources option in Android Auto's developer settings, users can install apps like AABrowser, which then appears in the Android Auto launcher and the vehicle's infotainment system.

AppWizard

July 24, 2026

India orders takedown of Jack Dorsey’s bitcoin-linked messaging app Bitchat

India's Cyber Crime Coordination Centre has ordered GitHub to remove Bitchat, an offline messaging app created by Jack Dorsey, due to its use by anti-government demonstrators in Delhi. The order, issued under Section 79(3)(b) of the IT Act, targets three GitHub repositories linked to Bitchat and requires action within three hours. The app enables anonymous communication without registration, posing challenges for law enforcement regarding lawful interception and investigation. Bitchat is a decentralized messaging tool that uses Bluetooth mesh networks for encrypted communication without internet access, and it also supports offline bitcoin transactions, ensuring continuity during outages or shutdowns.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

Tech Optimizer

July 21, 2026

I Built My Second ETL Pipeline. This Time, I Started Thinking Like a Data Engineer

The author transitioned from a data analyst role to a data engineer, creating a 12-month self-study roadmap focused on learning by building projects. The first project was a GitHub ETL pipeline, which evolved from a simple Python script to a more complex system using SQLite and GitHub Actions for automation. The author realized that the challenges of data engineering lay in system design and orchestration rather than just writing ETL logic. For the second project, the author built an automated RSS ingestion pipeline to explore engineering decisions in creating a reliable data pipeline. The project emphasized the importance of separating application responsibilities from orchestration tasks, leading to the use of Docker for consistent execution environments and Kestra for orchestration. The author validated each component of the project incrementally: first the Python ETL, then PostgreSQL, followed by Docker, and finally Kestra. This approach ensured that each layer functioned correctly before adding complexity. The final architecture included distinct responsibilities for each component: Python for data processing, PostgreSQL for data storage, Docker for execution, and Kestra for orchestration. The author learned that effective engineering involves considering system reliability, error handling, and observability, shifting the focus from merely writing code to designing entire systems. The experience transformed the author's mindset, emphasizing the importance of incremental building and the separation of execution and orchestration responsibilities.

Winsage

July 18, 2026

Edge Drop Clipboard Manager Brings Mouse-Driven Copy Management to Windows 11

A new clipboard manager for Windows 11 called Edge Drop is in early testing, developed by AdiArtist. It enhances the clipboard experience by sitting on the left side of the screen and can be accessed by hovering the mouse or using the Alt+C shortcut. Edge Drop handles text, images, and various file types, automatically integrating copied items. Users can download it from its official website or GitHub, currently at version 0.1.0. The app allows users to drag items into it and features stacking capabilities for grouping related content, although it does not support combining different content types in a single stack. Unlike Windows 11's built-in clipboard history, which supports item pinning and cross-device syncing, Edge Drop focuses on mouse interaction. The name "Edge Drop" may face challenges due to a similar feature in Microsoft's Edge browser, which is being phased out. Users should be aware of potential rebranding and instability as the app is still in development. Installation involves downloading from the official website or GitHub, and it is not available in the Microsoft Store. Edge Drop is designed for creative workflows but may not suit users who prefer keyboard navigation or require clipboard syncing across devices. Ongoing development may introduce new features and improvements.

Tech Optimizer

July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.