Webrat, disguised as exploits, is spreading via GitHub repositoriesKaspersky Securelist·Dec 23, 09:25 UTC · Dec 23, 2025MalwareCVE-2025-59295CVE-2025-10294CVE-2025-59230+7 CVEs47
200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and DevelopersThe Hacker News·Jun 21, 09:10 UTC · Jun 21, 2025Malware42
CloudSorcerer APT uses cloud services and GitHub as C2Kaspersky Securelist·Jul 8, 07:00 UTC · Jul 8, 2024Malware142
Cyberattack on GitHub customers linked to North Korean hackers, Microsoft saysThe Record·Jul 20, 18:23 UTC · Jul 20, 2023Malware42
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackThe Hacker News·Jul 10, 17:27 UTC · Jul 10, 2026Malware42
CISA Admin Leaked AWS GovCloud Keys on GithubKrebs on Security·May 20, 23:14 UTC · May 20, 2026Malware42
Hackers Abusing GitHub to Evade Detection and Control Compromised HostsThe Hacker News·Dec 21, 03:24 UTC · Dec 21, 2023Malware42
222 GitHub Repositories Linked to Fake Go Package Malware OperationSecurity Affairs·Jul 10, 10:23 UTC · Jul 10, 2026Malware42
GitHub abused to distribute payloads on behalf of malware-as-aArs Technica · Security·Jul 17, 22:16 UTC · Jul 17, 2025Malware42
Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting TopThe Hacker News·Mar 26, 03:55 UTC · Mar 26, 2024Malware142
Miasma Worm Compromises 73 Microsoft GitHub RepositoriesSecurity Affairs·Jun 9, 16:08 UTC · Jun 9, 2026Malware142
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious CodeThe Hacker News·Sep 9, 12:05 UTC · Sep 9, 2024Malware142
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver MalwareThe Hacker News·Jan 18, 05:17 UTC · Jan 18, 2023Malware142
By end of 2023, GitHub to force code contributors to use twoThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Malware142
Massive GitHub malware operation spreads BoryptGrab stealerSecurity Affairs·Mar 8, 13:38 UTC · Mar 8, 2026Malware42
Ubuntu-Maker Canonical’s GitHub Account Gets HackedThe Hacker News·Jul 7, 15:58 UTC · Jul 7, 2019Malware42
The Winnti Gang continues its activity and leverages GitHub for C&C CommunicationsSecurity Affairs·May 7, 12:32 UTC · May 7, 2018Malware42
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignThe Hacker News·Apr 29, 08:29 UTC · Apr 29, 2026Malware42
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing FiltersThe Hacker News·Jul 21, 06:30 UTC · Jul 21, 2025Malware42
North Korean hackers targeted tech companies through JumpCloud and GitHubHelp Net Security·Jul 25, 10:40 UTC · Jul 25, 2023Malware42
Octopus Scanner Malware: open source supply chain attack via NetBeans projects on GitHubSecurity Affairs·May 29, 12:22 UTC · May 29, 2020Malware42
Hades PyPI Attack: 19 Packages Poisoned to AutoThe Hacker News·Jun 9, 10:34 UTC · Jun 9, 2026Malware42
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
GitHub besieged by millions of malicious repositories in ongoing attackArs Technica · Security·Feb 28, 22:12 UTC · Feb 28, 2024Malware42
GitHub Warns Devs of North Korean AttacksInfosecurity Magazine·Jul 21, 09:30 UTC · Jul 21, 2023Malware42
Anthropic’s AI used fake identities, malware in rogue attack on GitHub projectArs Technica · Security·Aug 5, 20:47 UTC · Aug 5, 2026Malware42
Malicious npm Package Stole Files From Claude AI User Directory via GitHubThe Hacker News·May 27, 15:44 UTC · May 27, 2026Malware42
Fake ChatGPT and Claude installers on GitHub are dropping Deno RAT malwareHelp Net Security·May 27, 00:00 UTC · May 27, 2026Malware42
DPRK-Linked Hackers Use GitHub as C2 in MultiThe Hacker News·Apr 9, 04:56 UTC · Apr 9, 2026Malware142
GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain SecurityThe Hacker News·Sep 25, 07:40 UTC · Sep 25, 2025Malware42
Hundreds of GitHub repos served up malware for yearsHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2025Malware42
‘CanisterWorm’ Springs Wiper Attack Targeting IranKrebs on Security·Mar 23, 19:04 UTC · Mar 23, 2026Malware42
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malwareSecurity Affairs·Nov 30, 01:02 UTC · Nov 30, 2025Malware42
CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix PhishingThe Hacker News·Oct 14, 05:07 UTC · Oct 14, 2025Malware42
Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm PackagesThe Hacker News·Aug 6, 10:50 UTC · Aug 6, 2025Malware42
Fake GitHub projects distribute stealers in GitVenom campaignKaspersky Securelist·Feb 25, 06:21 UTC · Feb 25, 2025Malware42
New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for StealthThe Hacker News·Apr 25, 03:49 UTC · Apr 25, 2024MalwareCVE-2024-21413147
Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading MalwareThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2024Malware42