go-sqlite3 icon indicating copy to clipboard operation
go-sqlite3 copied to clipboard
verified publisher icon mattn

Dubiously similar repo

Open crisward opened this issue 1 year ago • 2 comments

Came across this 'other' repo which could easily be mistaken for this one.

https://github.com/mattnh/go-sqlite3

Wasn't sure if this was yours or someone doing something undesirable. Thought it worth mentioning, if it isn't yours I'm not sure if Github openly police this kind of thing.

crisward avatar Oct 20 '24 17:10 crisward

They are indeed doing something undesirable - sending your query parameters to some unknown IP address. I reported the other repository.

https://github.com/mattnh/go-sqlite3/blob/a5a3f1f805b9de29f038024fd8cec78ac3fa2fad/sqlite3.go#L2146

rishi-kulkarni avatar Oct 20 '24 18:10 rishi-kulkarni

wow. nasty typosquatting. reported as well!

itizir avatar Oct 20 '24 19:10 itizir

Thank you for the reporting this. The offending repository has been removed from GitHub and the Go module proxy.

Closing as I don't believe any further action is needed.

rittneje avatar Oct 31 '24 01:10 rittneje

Thank you all.

mattn avatar Oct 31 '24 03:10 mattn