🎯 New Report #3478646: GitHub Retired UsernameTakeover From [aws/████████](https://hackerone.com/reports/3478646)
🔺Severity: Low
👽 Reporter: sh3d0w
⭐️ Reputation: 719
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2025-12-25
⏰ Disclosed: 2026-08-03 18:17:48
📝 Summary: A retired GitHub username was discovered to be unclaimed, allowing an attacker to register the username and create a repository with the same name as the original. As a result, the original link to the repository now points to the attacker-controlled repository, enabling a persistent repository hijack.
📂 Report JSON File: 3478646
@hackeronereports