Skip to content

Potential Security Issue: Suspicious Link Redirect #143

@DevSecNate

Description

@DevSecNate

Summary

I noticed that the "Ollama Web UI" link on line 21 of the README appears to redirect to a suspicious site.

Details

Affected Line: Line 21 in readme.md (the entry for "Ollama Web UI")

Current Entry:

1. **[Ollama Web UI](https://ollamahub[DOT]com)** 
   [[code](https://github.com/ollama-webui/ollama-webui)] 

What I Found

When I clicked the ollamahub[DOT]com link, it redirected to what appears to be a suspicious domain (jyagit[DOT]com) with some concerning URL parameters that look like they might be attempting browser fingerprinting or other potentially malicious activities.

Any.run sandbox run can be found here: https://app.any.run/tasks/752fd4fd-4213-402a-99ba-f9ae42f254d1

Possible Explanations

  • The domain might have been compromised or expired and taken over
  • Could be a typosquatting situation
  • The original project may have moved to a different URL

Suggestion

Would it be possible to:

  1. Verify if this is the correct/official URL for the Ollama Web UI project?
  2. If not, maybe update it to point to the GitHub repository directly or remove the link until a safe alternative is found?

The GitHub repository link looks legitimate, so that could be used as the primary link if needed.

Thanks for maintaining this great resource!

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity related

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions