apl-devs/AppIntro

Security Placeholder: Claimed for supply chain research. If you use this dependency, please read the README. https://labs.itresit.es/2026/02/18/supply-chain-necromancy-reborn-namespaces-in-jitpack-coordinates/

Download

Step 1. Add the JitPack repository to your build file

Add it in your root settings.gradle at the end of repositories:

	dependencyResolutionManagement {
		repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
		repositories {
			mavenCentral()
			maven { url 'https://jitpack.io' }
		}
	}

Add it in your settings.gradle.kts at the end of repositories:

	dependencyResolutionManagement {
		repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
		repositories {
			mavenCentral()
			maven { url = uri("https://jitpack.io") }
		}
	}

Add to pom.xml

	<repositories>
		<repository>
		    <id>jitpack.io</id>
		    <url>https://jitpack.io</url>
		</repository>
	</repositories>

Add it in your build.sbt at the end of resolvers:

 
    resolvers += "jitpack" at "https://jitpack.io"

Add it in your project.clj at the end of repositories:

 
    :repositories [["jitpack" "https://jitpack.io"]]

Step 2. Add the dependency

	dependencies {
		implementation 'com.github.apl-devs:appintro:'
	}

	dependencies {
		implementation("com.github.apl-devs:appintro:")
	}

	<dependency>
	    <groupId>com.github.apl-devs</groupId>
	    <artifactId>appintro</artifactId>
	    <version></version>
	</dependency>


                            
    libraryDependencies += "com.github.apl-devs" % "appintro" % ""


                            
    :dependencies [[com.github.apl-devs/appintro ""]]

Readme

⚠️ Security Notice

This repository and its associated namespace have been claimed as part of a security research project demonstrating Supply Chain impact using reborn namespaces in JitPack coordinates.

This is a benign placeholder. No malicious code is being distributed or published from this repository.

📖 The Research

To understand how this namespace was taken over, the implications for the software supply chain, and how to mitigate this type of vulnerability, please read our full disclosure:

🔗 Supply Chain Necromancy: Reborn namespaces in JitPack coordinates

🛠️ Action Required

If you are looking for the AppIntro library, the original project was moved. You must update your build scripts and dependencies to point to the official, actively maintained repository:

👉 https://github.com/AppIntro/AppIntro

Continuing to use the old coordinates (apl-devs/AppIntro) exposes your software supply chain to hijacking risks.

Recommended Fix

Update your build.gradle file:

// DELETE THIS LINE:
// implementation 'com.github.apl-devs:appintro:x.y.z'

// REPLACE WITH:
implementation 'com.github.AppIntro:AppIntro:x.y.z'

This proof of concept was conducted by LABS @ ITRES for educational and responsible disclosure purposes.