Rogue developer on here is spreading malware - are there any malware analysts that can help us?

[concernedcitizen2]

Discussion Type

Product Feedback

Discussion Content

I'm new to GitHub, I only made an account because my browser warned me that an extension I had for months - had malware on it.
The user @ansh has supposedly sold the extension to someone he has currently not named.

The extension in question is called Jiffy Reader from becoming public.

The chrome extension was removed, but there are archives shared in https://github.com/ansh/jiffyreader.com/issues/342

We have recently found archived versions of the extension, but none of us know the impact it had.
If it was something as innocent as running tasks in the background, I wouldn't mind it too much.
Some people are suggesting that it stole cookies and sessions.

I'm sorry if this is not the correct section, I just want some closure for myself and the other people affected by this.

Thank you in advance,
concernedcitizen2

[ansh]

Hi, please do not share misinformation. I am no longer involved with the extension and the versions being uploaded are not from the jiffyreader repository

Please check this issue for my full response https://github.com/ansh/jiffyreader.com/issues/342

[concernedcitizen2]

Hi, please do not share misinformation. I am no longer involved with the extension and the versions being uploaded are not from the jiffyreader repository

Please check this issue for my full response ansh/jiffyreader.com#342

I just read your response and I have replied.

If you truly have our best interest in mind, help us get to the bottom of this.
I will edit the original post to be more clear.

[ebndev]

Hi @concernedcitizen2,

Thanks for being a part of the GitHub Community, we're glad you're here!

It looks like you're looking for support from Jiffy Reader. You might want to try asking for help somewhere that focuses on this project, such as opening an issue in the project's repository or seeing if they have a support page.

It's possible that another GitHub user might have run into this same issue and can help, but the GitHub Community Discussions focuses primarily on topics related to GitHub itself or collaboration on project development and ideas. We want to make sure you’re getting the best support you can, but this space may not be the right place for this particular topic.

Best of luck!