Typosquatting GitHub Container Registry `Ghrc.io`

1 bschaatsbergen 0 8/21/2025, 3:46:34 PM
Someone is running a container registry at ghrc.io (not ghcr.io). I'm not sure who owns it, but be careful :)

``` ~bruno> nerdctl push ghrc.io/test/test:1 INFO[0006] pushing as a reduced-platform image (application/vnd.docker.distribution.manifest.v2+json, sha256:148fb584ee55b015975a086307e06cf86f69fa8f40583b0eb1d77a225acff728) manifest-sha256:148fb584ee55b015975a086307e06cf86f69fa8f40583b0eb1d77a225acff728: waiting |--------------------------------------| layer-sha256:58722f69eccf56851b488760cdaaa9fb6eb143f5ce7adfd6a953b76a730f114a: waiting |--------------------------------------| layer-sha256:9923852056eb09462c3344515191318e7aa33ff28057c946bc41a414ee57df0b: waiting |--------------------------------------| config-sha256:58cd35ff023dcb1bcaff2f82a946979e3bf504e406e8fd56129eb3b94a199125: waiting |--------------------------------------| layer-sha256:d1e40442030765a3ac5d135c39154d052eba20953ea0e5d35a066f7722cdd93d: waiting |--------------------------------------| layer-sha256:b84c27356c4f5424250b4b955d4117f05a511f4c4e68e0b42b45b8e30c13818f: waiting |--------------------------------------| layer-sha256:60d6ddba22276594e6a687f1a65660e663212f56235b5d17e3c5288a5b4413d6: waiting |--------------------------------------| layer-sha256:7bcc8bff74cbeacbac9c6869b6a9def273b93cc67de196b347688de2a9185de0: waiting |--------------------------------------| layer-sha256:997d2d68e2fc83df067d8e29a4a06bab06bb202146e47bac816a352ad1d30c04: waiting |--------------------------------------| elapsed: 0.7 s total: 0.0 B (0.0 B/s) FATA[0006] failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://ghrc.io/token?scope=repository%3Atest%2Ftest%2Ftest%3Apull%2Cpush: 403 Forbidden ```

Comments (0)

No comments yet