Help Net Security

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

New versions of Git are out, with fixes for five vulnerabilities, the most critical (CVE-2024-32002) of which can be used by attackers to remotely execute code during a “clone” operation. Git is a ...
techtimes

GitHub Malicious Repositories: 10,000 Trojan Clones Evade Detection for Over a Year

A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...
Ars Technica

GitHub besieged by millions of malicious repositories in ongoing attack

GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency ...
Help Net Security

AI developers targeted via trojanized GitHub repositories

Cybercriminals are cloning popular GitHub repositories for AI tools and developer resources to distribute an infostealer, according to Netskope Threat Labs. Netskope came across the campaign while ...