Windows Malware Github
Earleen Statham
This is SOOOOOO broken. Every 10 seconds I get a popup asking for a password. No reason. No indication of which account it's for, just a generic "provide a username and password". So I have no idea which repository it wants a password for or even what program is requesting it. No indication of whether the password fail or succeded, and after a while the box just reappears. Over top of stuff, in the middle of presentations, etc. This is effectively malware. This all started with the installation of SourceTree 2.0, so it's gotta be that.
The problem seemed to start for me when I added a new bitbucket account (academic) and wanted to use two accounts. I have had Source Tree 2.x for a long time and don't recall this headache. I agree the GUI is borked since we have no idea for which account or which operation the credintial manager is asking this information.
Tools > Options > Authentication seemed also to be helpful for me. I removed the Saved passwords that were stored and re-tried a push. That forced the GCM dialog, to which I supplied credentials for the repo that I was pushing to. The push was successful, and I saw also that a new entry in "Saved passwords" was created for that repo.
It seems weird, since I have OAuth for both accounts, and can browse my bitbucket.org repos (some of which are private) with no problem. Why doesn't push (or pull) use that same method to authenticate?
EDIT (20 June 2018): Recent changes to Bitbucket authentication has also meant that you must use your email (NOT your username) when logging in. Currently, logging in with your username is still accepted but seems to cause several issues ranging from this repeated login prompt issue to the "too many login attempts" error when pushing.
The majority of issues in Git Credential Manager for Windows have been fixed in recent versions. The latest version (1.12.0) released a couple days ago fixed the remaining issues I had with Bitbucket authentication.
The latest Git Credential Manager for Windows is included in the latest Git for Windows. Until Atlassian update their embedded version, you could install Git for Windows 2.14.0 and within SourceTree, click "Use System Git" in Options.
Just to pop in here and bump this thread, it's been marked resolved, but it isn't. I have tried all of the "fixes" in this thread, and the only one that stops the annoying pop ups is going back to 1.9. Something happened recently, because I was just using this same repo on github last week without the issue. I noticed I was using the system git, so I updated that, tried the embedded git, etc. I stopped that service, rebooted a few times, yadayada.
Beware, that SourceTree is going to prompt you to login one time for every repository (not account) it knows about (not just open tabs), when it feels like checking for changes for the first time after you completed the above steps and you have to login every time providing your password.
Regarding a temporary 'fix' for this using 2.x version (on Windows), what I did when that annoying pop-up came up, was opening Task Manager, see what processes are running, could spot "Git credential manger.exe" (can't remember exact name), closed SourceTree and renamed that to something like "Git credential manger.old", (so it couldn't run anymore) which 'fixed' the popups for me.
Most likely, your environment is not configured correctly. You can verify that your environment is configured correctly by running "git config --list" and looking for credential.helper=manager. If you do not see the line, then you know that Git does not know about the Git Credential Manager. You can configure Git to use the Credential Manager by running "git config credential.helper manager"
This was because I was having repos in Sourcetree for which my credentials expired.
I didn't want to just remove those repo as I might get access to them again in the future (I'm contracting for multiple clients and often working again for an older client after a few months, at which point I gain access to their git repos again).
What I did was to just untick "Tools > Options > General > Check default remotes for updates every 10 minutes" and that stopped those popup coming from Sourcetree trying to access repos for which my credentials had expired.
Same issue here. Recently installed SourceTree (3.0.8) on a fresh Windows 10, left it open overnight, and this morning I had 1.364 of those login-popups waiting for me. SourceTree was using an impressive 1.7 GB memory as well.
Source Tree is wonderful and free , but the annoying bitbucket login popups doesnt tell what repo it asks login info for , if the login was successful or not
I'm really tempted to switch to git kraken
You may try the latest Git Credential Manager version linked in the post above yours (thanks Sunil Raman for the heads up). Then in SourceTree you must set to you use System Git to make it effictive I think.
I'll add something here that I think has solved it and others may have mentioned before. Probably the wiping all accounts clean might do the job, but If you're using SSH on some of your repos and HTTPS on others, you'll need to generate a private access key and use that as a password for the HTTPS ones. Also, keep in mind that subrepos may be set up this way, too.
I was having this issue too, I tried several suggestions on this page to no avail. Turned out to be much simpler, I still had a reference in my SourceTree to an out-of-date repo which had finally been removed. Once I deleted that, the error went away.
c80f0f1006