GHBUSTER

Summary from the TLDR InfoSec newsletter

ghbuster is a tool from Datadog that detects suspicious GitHub users and repos using heuristics. The tool analyzes patterns like coordinated star manipulation, commits from unlinked emails, users with only forked repositories, and accounts with minimal community activity to flag threat actors weaponizing trust in the open-source ecosystem. It provides a command-line interface with modular detection rules and requires a GitHub API token.