OSCD — Incident Report Form

IMPORTANT: This form is PRIVATE. Your information will only be seen by the OSCD coordination team. Nothing will be published without your explicit consent. Do NOT include passwords, tokens, or private keys in any field.

1. Contact Information

Name or alias * Email *

We will only use this to contact you about your report.

2. Affected Repository (optional)

Only fill this if you are comfortable sharing it.

Repository name Repository URL Package manager

3. Incident Details

Type of attack * Description of the attack * Current status * Estimated impact *

4. Evidence (optional)

Links to suspicious commits, PRs, messages, or screenshots. Do NOT include passwords or tokens.

Evidence links Help requested *

Help identifying the attack vector Help cleaning my code Help reporting to GitHub Security Help communicating to my users Just want to document the case for the community

Urgency level *

5. Consent

* I understand that OSCD is a voluntary community effort, not a professional service * I accept that my case may be documented anonymously for the community * I accept that advice is provided "as is" without warranties

Disclaimer: OSCD is a voluntary community effort of mutual aid. We are not legal advisors, not a professional incident response company, and not a substitute for GitHub Security. All support is provided "AS IS" without warranties of any kind.