I discovered a large-scale malware distribution campaign on GitHub

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

This is the story of how I found 10,000 repositories on GitHub that distribute Trojan malware. They are all from different contributors, have different names, and are not forks of other repositories. But they share a common pattern, which is what allowed me to write a script to find

Read on orchidfiles.com ↗