EtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesThe Hacker News·Jun 7, 15:47 UTC · Jun 7, 2026Malware155
MaaS operation using Emmenhtal and Amadey linked to threats against Ukrainian entitiesCisco Talos·Jul 17, 10:00 UTC · Jul 17, 2025Malware30
Security Experts Urge IT to Lock Down GitHub ServicesInfosecurity Magazine·Jan 15, 10:15 UTC · Jan 15, 2024Malware30
Webrat, disguised as exploits, is spreading via GitHub repositoriesKaspersky Securelist·Dec 23, 09:25 UTC · Dec 23, 2025MalwareCVE-2025-59295CVE-2025-10294CVE-2025-59230+7 CVEs47
200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and DevelopersThe Hacker News·Jun 21, 09:10 UTC · Jun 21, 2025Malware42
CloudSorcerer APT uses cloud services and GitHub as C2Kaspersky Securelist·Jul 8, 07:00 UTC · Jul 8, 2024Malware142
Cyberattack on GitHub customers linked to North Korean hackers, Microsoft saysThe Record·Jul 20, 18:23 UTC · Jul 20, 2023Malware42
SunOrcal Adds GitHub and Steganography to its Repertoire, Expands to Vietnam and MyanmarPalo Alto Unit 42·Nov 1, 10:58 UTC · Nov 1, 2018Malware30
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackThe Hacker News·Jul 10, 17:27 UTC · Jul 10, 2026Malware42
CISA Admin Leaked AWS GovCloud Keys on GithubKrebs on Security·May 20, 23:14 UTC · May 20, 2026Malware42
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware SpreadThe Hacker News·Jul 29, 13:36 UTC · Jul 29, 2024Malware30
Hackers Abusing GitHub to Evade Detection and Control Compromised HostsThe Hacker News·Dec 21, 03:24 UTC · Dec 21, 2023Malware42
222 GitHub Repositories Linked to Fake Go Package Malware OperationSecurity Affairs·Jul 10, 10:23 UTC · Jul 10, 2026Malware42
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesCisco Talos·Apr 7, 10:00 UTC · Apr 7, 2026Malware55
GitHub abused to distribute payloads on behalf of malware-as-aArs Technica · Security·Jul 17, 22:16 UTC · Jul 17, 2025Malware42
Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting TopThe Hacker News·Mar 26, 03:55 UTC · Mar 26, 2024Malware142
Github Account of Gentoo Linux Hacked, Code Replaced With MalwareThe Hacker News·Jul 4, 14:08 UTC · Jul 4, 2018Malware30
GitHub Dependabot malware alerts now cover eight ecosystemsHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2026Malware30
Miasma Worm Compromises 73 Microsoft GitHub RepositoriesSecurity Affairs·Jun 9, 16:08 UTC · Jun 9, 2026Malware142
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
Malware-as-a-Service Campaign Exploits GitHub to Deliver PayloadsInfosecurity Magazine·Jul 17, 16:00 UTC · Jul 17, 2025Malware30
GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious CodeThe Hacker News·Sep 9, 12:05 UTC · Sep 9, 2024Malware142
Network of ghost GitHub accounts successfully distributes malwareHelp Net Security·Jul 24, 00:00 UTC · Jul 24, 2024Malware30
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver MalwareThe Hacker News·Jan 18, 05:17 UTC · Jan 18, 2023Malware142
By end of 2023, GitHub to force code contributors to use twoThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Malware142
Threat actor impersonated hundreds of brands on GitHub to push infostealer malwareHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
Massive GitHub malware operation spreads BoryptGrab stealerSecurity Affairs·Mar 8, 13:38 UTC · Mar 8, 2026Malware42
Hackers create fake GitHub profiles to deliver malware through repositoriesThe Record·Jun 14, 17:37 UTC · Jun 14, 2023Malware55
Ubuntu-Maker Canonical’s GitHub Account Gets HackedThe Hacker News·Jul 7, 15:58 UTC · Jul 7, 2019Malware42
The Winnti Gang continues its activity and leverages GitHub for C&C CommunicationsSecurity Affairs·May 7, 12:32 UTC · May 7, 2018Malware42
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignThe Hacker News·Apr 29, 08:29 UTC · Apr 29, 2026Malware42
GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT FirmsThe Hacker News·Feb 26, 14:31 UTC · Feb 26, 2026Malware30
Beware: GitHub repos distributing Atomic Infostealer on macOSSecurity Affairs·Sep 22, 06:49 UTC · Sep 22, 2025Malware30
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing FiltersThe Hacker News·Jul 21, 06:30 UTC · Jul 21, 2025Malware42
North Korean hackers targeted tech companies through JumpCloud and GitHubHelp Net Security·Jul 25, 10:40 UTC · Jul 25, 2023Malware42
Octopus Scanner Malware: open source supply chain attack via NetBeans projects on GitHubSecurity Affairs·May 29, 12:22 UTC · May 29, 2020Malware42