Morning Overview on MSN
More than 17,000 fake GitHub projects are handing downloaders password-stealing malware
The security firm Apiiro counts 17,610 malicious repositories in the FakeGit campaign on GitHub, a fleet of fake projects ...
Windows Report on MSN
FakeGit floods GitHub with over 17,000 malware repos
FakeGit returns with 17,610 malicious GitHub repositories spreading SmartLoader and StealC malware through deceptive downloads.
SlugFest flaw in npm Trusted Publishing exposed 1,500+ packages to takeover via reclaimed GitHub names, risking millions of ...
A slug flaw in npm Trusted Publishing exposed 1,500+ packages with 10m downloads. Bloom Security on what it means when AI ...
Bloom Security uncovered a flaw in npm Trusted Publishing that exposed 1,500+ packages to potential malicious takeovers via ...
A weakness in npm's trust model could let attackers publish updates to legitimate packages by claiming abandoned GitHub ...
An npm Trusted Publishing flaw let anyone claiming an abandoned GitHub repo name publish to 1,500+ packages. GitHub says it ...
Kimsuky exploits GitHub and trusted code platforms to deliver malware and spy on Ukrainian diplomacy, security and policy ...
Security researchers uncovered a weakness in npm Trusted Publishing that could let attackers publish malicious releases ...
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
GitHub now expires unvalidated npm trusted publisher bindings after 48 hours to limit package hijacks through reclaimed ...
More than 17,000 fake repositories on GitHub are currently distributing the SmartLoader malware, a reactivation of the ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results