Fake GitHub repositories are used to lure victims into downloading. An infostealer uses signatures from Microsoft’s Hardware Compatibility Program.

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...

An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.

Threat actors are using public GitHub repositories to host and distribute malware through the Amadey botnet in an ongoing campaign. (Image: Shutterstock) Threat actors are using public GitHub ...

Cursor has patched a high-severity Windows vulnerability that allowed malicious Git repositories to execute code, highlighting security risks in AI coding environments. A cursor flaw goes unpatched ...

A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...