Github wikis are editable by anyone https://github.com/nextcloud/bookmarks/wiki

How it was found

Github wikis on the following projects

https://github.com/nextcloud/bookmarks/wiki

can be edited by any logged in user in the system. This poses security and reputation risk for the company.

Impact

As wikis listed above can be edited by any person on the internet, a malicious actor can accurately craft a message or a note which would lead a user to download a malicious component in a natural way.