Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
Dark Reading

Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

Why Florida hunters should never cut off the head of a python

Catching a python can be very challenging during the Florida Python Challenge. But when one is caught, there are rules for ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Microsoft

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...