Open-Source Project PakePlus Discovered Using GitHub Tokens to Auto-Follow Developers' Other Projects
2025-07-30 / Read about 0 minute
Author:小编   

V2EX users have exposed the open-source project PakePlus for engaging in unauthorized following practices. Specifically, it is alleged that when users utilize GitHub tokens to perform operations, the project's original author employs these tokens to automatically follow their accounts and other related projects. This practice has sparked concerns among users regarding privacy and security implications.