Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware. The campaign drew traffic from search ...

An information-stealing virus was uploaded to a GitHub repository disguised as downloadable weights for Alibaba’s Qwen 3.8 27B model. SlowMist’s security team reported the incident on August 28, and ...

LastPass, in collaboration with Delphos Labs, has discovered a new infostealer variant and named it “Rapuncel”. The malware was noticed through an unofficial GitHub repository named LastPass ...

Threat actors are using public GitHub repositories to host and distribute malware through the Amadey botnet in an ongoing campaign. (Image: Shutterstock) Threat actors are using public GitHub ...

Cursor has patched a high-severity Windows vulnerability that allowed malicious Git repositories to execute code, highlighting security risks in AI coding environments. A cursor flaw goes unpatched ...

A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...