Hundreds of GitHub repos found posing as real software to push malware

Russian hackers are trying to sneak infostealers onto people's devices to grab passwords, crypto, and more.
The Hacker News

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Researchers uncover 7,600 FakeGit GitHub repos, including 800 AI skills and MCP lures spreading SmartLoader malware.

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
Developer Tech

Fake GitHub repositories exploit developer trust to spread malware

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...
The Hacker News

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
Dark Reading

GitHub Repos Targeted in Cyber-Extortion Attacks

An unknown user going by the handle "Gitloker" is grabbing and wiping clean repositories on GitHub in an apparent effort to extort victims. The campaign, which a researcher at Chilean cybersecurity ...
InfoWorld

GitHub AI agent leaks private repositories via prompt injection attack

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
Bleeping Computer

Millions of GitHub repos likely vulnerable to RepoJacking, researchers say

Millions of GitHub repositories may be vulnerable to dependency repository hijacking, also known as "RepoJacking," which could help attackers deploy supply chain attacks impacting a large number of ...
Tech Times on MSN

GitHub Actions gets secure-by-default CI/CD: Backport shuts the pwn request window

GitHub Actions security enforcement went live today: actions/checkout now refuses by default to execute untrusted fork code ...
Dark Reading

Millions of Repos on GitHub Are Potentially Vulnerable to Hijacking

Millions of enterprise software repositories on GitHub are vulnerable to repojacking, a relatively simple kind of software supply chain attack where a threat actor redirects projects that are ...