More than 100,000 GitHub repositories found spreading malicious packages

Security researchers at Apiiro have recently uncovered a malware-spreading campaign designed to exploit the capabilities of the GitHub platform. The attack, which started in May 2023 with "several" malicious packages uploaded to the Python Package Index (PyPI) official repository, was capable of impacting at least 100,000 GitHub repositories and "presumably" millions more.

Read Entire Article

campaign capabilities exploit found github index least malware package platform pypi python repositories researchers security security researchers