All of my repositories (including new ones) are suddenly flagged as ‘danger’, even though they weren’t before.

[adhi-fs]

Select Topic Area

Bug

GitHub Feature Area

Actions

Body

All of my repositories (including new ones) are suddenly flagged as ‘danger’, even though they weren’t before.

[github-actions[bot]]

💬 Your Product Feedback Has Been Submitted 🎉

Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users.

Here's what you can expect moving forward ⏩

• Your input will be carefully reviewed and cataloged by members of our product teams. 
  • Due to the high volume of submissions, we may not always be able to provide individual responses.
  • Rest assured, your feedback will help chart our course for product improvements.
• Other users may engage with your post, sharing their own perspectives or experiences. 
• GitHub staff may reach out for further clarification or insight. 
  • We may 'Answer' your discussion if there is a current solution, workaround, or roadmap/changelog post related to the feedback.

Where to look to see what's shipping 👀

• Read the Changelog for real-time updates on the latest GitHub features, enhancements, and calls for feedback.
• Explore our Product Roadmap, which details upcoming major releases and initiatives.

What you can do in the meantime 💻

• Upvote and comment on other user feedback Discussions that resonate with you.
• Add more information at any point! Useful details include: use cases, relevant labels, desired outcomes, and any accompanying screenshots.

As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities.

Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐

[olyadboka]

This is a critical account-level security alert from GitHub's automated systems. The following steps will guide you through securing your account and resolving the issue through the official support channel.
Step 1: Immediately Secure Your Account (Do This First)

Your first priority is to ensure you are the only person who can access your account.

Change Your GitHub Password:

Go to Settings -> Password and authentication.

  `  Click Change password.`

    Enter your current password and create a new, strong, unique password that you don't use anywhere else.

Enable Two-Factor Authentication (2FA) (If Not Already Enabled):

    In Settings -> Password and authentication, scroll to "Two-factor authentication".

    Click Enable two-factor authentication and follow the setup steps. You will need an authenticator app on your phone (like Google Authenticator, Authy, or Microsoft Authenticator). Do not use SMS if possible; an app is more secure.

    Important: Download and safely store your 2FA recovery codes. These are vital if you lose your phone.

Review Account Security History:

    In Settings -> Security -> Security history, review the log for any unrecognized access attempts or actions. This can confirm if someone else accessed your account.

Check Authorized Integrations:

`    Go to Settings -> Applications.`

    Review the "Authorized OAuth Apps", "Authorized GitHub Apps", and "Personal access tokens". Revoke access for any applications or tokens you don't recognize or no longer use.

Step 2: Contact GitHub Support (The Only Way to Resolve the Flag)

The "dangerous" flag can only be removed by GitHub's support team. You must contact them directly.

Visit the GitHub Support Contact Page:

    Go to: https://support.github.com/contact

Fill Out the Support Form:

    Product: Select GitHub.com.

    Topic: Choose Account security or Abuse and spam (both are appropriate for this issue).

    Subject: Write a clear subject line.

        Example: Urgent: Account Flagged - All Repositories Marked Dangerous

    Body:

        Be clear and factual. Copy and paste the template below.

    Contact preferences: Enter your email address.

Email Template for Support Ticket:

    Subject: Urgent: Account Flagged - All Repositories Marked Dangerous

    Hello GitHub Support Team,

    My GitHub username is [Your GitHub Username, e.g., adhi-fs].

    I am writing to report a critical issue. As of [Date or Time you noticed the issue], all of my repositories—including newly created, empty ones—are being flagged with a "dangerous" warning. This suggests the flag is on my account itself and not related to any specific repository's content.

    I have already taken immediate steps to secure my account:
    - I have changed my account password.
    - I have enabled two-factor authentication (2FA).
    - I have reviewed my security log and authorized integrations.

    I believe my account may have been compromised, triggering an automated security lockdown, or this is a false positive. I kindly request you investigate the status of my account and remove the restrictions once its security is verified.

    Thank you for your prompt attention to this urgent matter.

    Sincerely,
    [Your Name]
    Ticket Related to: https://github.com/[Your Username]

Step 3: Wait for a Response and Cooperate

Check Your Email: All communication from GitHub Support will be sent to the primary email address associated with your account. Check your spam/junk folder as well.

Do Not Create Multiple Tickets: This will slow down the process. Be patient and wait for their response.

Cooperate Fully: If support asks for additional information, provide it honestly and promptly. They are trying to verify you are the legitimate account owner and that the account is secure.

Summary and Expected Outcome

By following these steps, you demonstrate to GitHub that you are a responsible account owner. The process is designed to protect you and the community.

Outcome 1 (Most Likely): Support confirms your account was flagged due to suspicious activity (often a compromise). Once they verify you have secured it (2FA is key), they will lift the "dangerous" flags.

Outcome 2 (Less Likely): It was a false positive in their automated system. They will apologize and remove the flags.

This issue cannot be solved by the community, so the discussion should be locked after providing this guidance to direct all energy to the official support channel.

[davevad93]

Hi @adhi-fs,

This topic has come up a few times already, the warning is due to a Google security policy regarding potential phishing sites, be sure to check out the discussions below for additional context:

1. My deployment pages in github are marked as dangerous sites.. but they are just simple projects like calculator and my portfolio #133058
2. SECURITY ERROR, HELP!!! #136029

Google may have preemptively flagged other repos you own as "dangerous". To solve this, take a look at the steps shown here, but make sure that no repos hosted on GitHub Pages clone webs like Netflix, Facebook, Instagram etcetera or contain copyrighted intellectual property that isn't yours, otherwise you'll be flagged again.

[queenofcorgis]

Hey there! 👋

Thanks for posting in the GitHub Community, @adhi-fs ! We're happy you're here. You are more likely to get a useful response if you are posting in the applicable category. The Accessibility category is a place for our community to discuss and provide feedback on the digital accessibility of GitHub products. Digital accessibility means that GitHub tools, and technologies, are designed and developed so that people with disabilities can use them.

I've gone ahead and moved this to the correct category for you. Good luck!

[ghostinhershell]

Hi @adhi-fs! Have the previous responses in this thread helped? In general, the best place to go for answers to account-specific questions like this one is opening a ticket on our Support page. Please open a ticket with them :)