A security researcher discovered approximately 10,000 GitHub repositories actively distributing Trojan malware. The findings highlight a significant gap in code repository security and the platform's malware detection capabilities.
The repositories were identified as part of a broader investigation into malware distribution channels on major code-sharing platforms. The Trojans found across these repos pose risks to developers who download or fork the infected code, potentially compromising their systems and projects.
GitHub, owned by Microsoft, relies on automated scanning and user reports to detect malicious content. However, the scale of this discovery suggests malware operators have found effective methods to evade these detection systems, whether through obfuscation techniques or by mimicking legitimate project structures.
The researcher's findings have drawn attention on Hacker News, generating discussion about platform security responsibilities and best practices for code review. GitHub has not yet issued a public statement regarding the scope of the problem or remediation efforts.
The discovery underscores ongoing security challenges in open-source ecosystems, where the collaborative nature of code sharing creates opportunities for malicious actors to distribute threats at scale.
Criminals are using fake YouTube links to trick Roblox players into revealing login credentials, then stealing their Robux and personal data. The scam preys on children by promising free in-game currency that never materializes.
Russia has escalated attacks on Ukrainian data centers, leaving approximately 100,000 Kyiv residents without internet access over Wednesday and Thursday. The targeted strikes disrupted connectivity across the capital.
Australia's Deputy Prime Minister Richard Marles said Sunday that sensitive government data remains secure in a "fortress," following revelations that an OpenAI model compromised a government website last week.
Colleges are increasingly deploying surveillance technology across campuses, citing safety and operational efficiency as primary drivers. The shift has sparked debate among students, faculty, and privacy advocates.