Overview

• The dump, claimed by Enlace Hacktivista, is publicly available via BitTorrent and direct HTTPS links, including a 500GB RPM packaging server archive named mirror/repo.tar.
• Leaked materials span packaging repositories, operational runbooks, Jira and project records, internal reports, and source code, revealing a maintained, large-scale software platform for traffic filtering.
• Documents indicate exports of deep-packet inspection and censorship systems to Pakistan, Ethiopia, and Kazakhstan, with Myanmar showing a rollout across 26 data centers and dashboards tracking 81 million simultaneous TCP connections.
• GFW Report, Net4People, and independent analysts have started validation and caution that thorough analysis will take time and that the archives may contain malware or tracking elements.
• The files are linked to Geedge Networks and the MESA lab at the Chinese Academy of Sciences, with Geedge’s chief scientist identified as Fang Binxing.