Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Hundreds of GitHub repos found posing as real software to push malware

Russian hackers are trying to sneak infostealers onto people's devices to grab passwords, crypto, and more.
Windows Report

BoryptGrab Malware Spreads Through 292 Fake GitHub Repositories

A fake GitHub repository campaign created hundreds of malicious projects that impersonated legitimate software and cybersecurity tools. The repositories directed users to deceptive download pages that ...