Force-Push to Main Rewrites History Adding indexe.cjs Loader

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•2

This rule detects forced pushes to the main branch of a GitHub repository where a specific file named 'indexe.cjs' is added or a specific commit ID (d1d55e13) is pushed. This behavior is indicative of a supply chain compromise where an attacker rewrites git history to inject malicious loaders or backdoors into the source code.