I found 10k GitHub repositories distributing Trojan malware
A researcher discovered 10,000 GitHub repositories distributing Trojan malware through automated cloning and readme modifications. The author highlights the difficulty of getting platform support to address these security threats.
Why it matters
This exposes significant security vulnerabilities in open-source platforms and the challenges of automated malware distribution at scale.
This is the story of how I found 10,000 repositories on GitHub that distribute Trojan malware. They are all from different contributors, have different names, and are not forks of other repositories. But they share a common pattern, which is what allowed me to write a script to find such repositories.
The article is a personal account of a technical security discovery and platform policy critique.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in