Hundreds of GitHub repos found posing as real software to push malware

GitVenom campaign: Over 200 fake GitHub repositories distribute malware to developers

Attackers are distributing malware through fake GitHub repositories as part of the GitVenom campaign.

Over 200 GitHub Repositories Exploit Malware Threat

Discover how a vast network of GitHub repositories is being exploited to spread Windows malware. Stay informed on cybersecurity threats.

How a Clean GitHub Repo Can Trick AI Coding Agents Into Running Malware?

Researchers Uncover 222 Fake GitHub Repositories Used to Spread Windows Malware

Socket uncovered Operation Muck and Load, a large GitHub-based malware campaign that used fake repositories, commit farming, and public dead

Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning

The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets

How to use GitHub safely

Knowing how to spot a malicious GitHub repository can help you avoid downloading malware disguised as legitimate software.