GitHub search exploited for malware distribution

Malware-laced GitHub repositories using popular names and topics are being advanced by threat actors through automated updates and fraudulent stars meant to manipulate the leading software developer platform's search rankings as part of a new open-source supply chain attack, The Hacker News reports.

advanced attack automated developer developer platform distribution exploited fraudulent github github repositories hacker malware malware distribution names network security platform popular reports repositories search software software developer stars supply supply chain supply chain attack the hacker news third-party-code threat threat actors topics updates