LeakySensey: Burst creation of unauthorized user accounts on self-hosted git server

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•2

Detects a burst of new user account creation activity on a self-hosted git repository instance. This pattern is indicative of unauthorized mass account creation, potentially following an initial compromise or exploitation, which is often a precursor to further malicious activities like persistent access or unauthorized code access.