Github: 17,610 repos distribute malware via downloads:
Security researchers from Apiiro have identified 17,610 Github repositories containing malware downloads ...
pcgameshardware.de/Sicherheit-Thema-229955/News/github-17610-repositories-malware-downloads-fakegit-1556402/
Similar to This
Previous
FakeGit malware campaign returns with 17,610 malicious GitHub repos: More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after ...
bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/
Infostealer Rapuncel: Hackers disguise new malware as GitHub repos: A malware campaign is currently using fake GitHub repositories to spread the new infostealer ...
winfuture.de/news,161402.html
Fake GitHub repositories: New info-stealer variant: Fake GitHub repositories are designed to trick victims into downloading. One info-stealer uses signatures ...
heise.de/news/LastPass-entdeckt-neue-Infostealer-Variante-die-sich-als-GitHub-Repo-tarnt-11459163.html
Nintendo Wipes Out Hundreds Of Switch Emulator Repositories: In the latest wave of GitHub takedowns
nintendolife.com/news/2026/08/nintendo-wipes-out-hundreds-of-switch-emulator-repositories
Nearly 300 GitHub repos pose as legit software to push malware: A threat actor has published hundreds of fake GitHub repositories impersonating legitimate ...
bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/
dlvr.it Jul 15
OpenMandriva's accused repo wrecker says it wasn't sabotage – it was a message: Ex-contributor claims he wasn't a rogue admin, hadn't left the project ...
theregister.com/os-platforms/2026/07/15/openmandrivas-accused-repo-wrecker-says-it-wasnt-sabotage-it-was-a-message/5270511
securityweek.com Jul 10
Network of 200 GitHub Repositories Used for Malware Infection: In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows ...
securityweek.com/network-of-200-github-repositories-used-for-malware-infection/
Clean GitHub repo tricks AI coding agents into running malware: An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a ...
bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/
GitHub disables Microsoft repos pushing password-stealing malware: Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples ...
bleepingcomputer.com/news/security/github-disables-microsoft-repos-pushing-password-stealing-malware/
Major attack: Worm takes down Microsoft GitHub repositories – with serious consequences
winfuture.de/news,159175.html
dlvr.it May 13
Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub: Where it’s been well and truly forked, seemingly without Microsoft’s code locker noticing
theregister.com/security/2026/05/13/malware-crew-teampcp-open-sources-its-shai-hulud-worm-on-github/5239319
JDownloader site hacked to replace installers with Python RAT malware: The website for the popular JDownloader download manager was compromised earlier this week ...
bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/
dlvr.it Apr 02
They thought they were downloading Claude Code source. They got a nasty dose of malware instead
theregister.com/2026/04/02/trojanized_claude_code_leak_github/
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
Notepad++ updater installed malware: The updater for the open-source editor Notepad++ installed malware on PCs. An update to Notepad++ v8.8.9 corrects this.
heise.de/news/Notepad-Updater-installierte-Malware-11109571.html
GitHub abused to distribute payloads on behalf of malware-as-a-service: The repository offered the MaaS a distribution channel not blocked in many networks.
arstechnica.com/security/2025/07/malware-as-a-service-caught-using-github-to-distribute-its-payloads/
Next