Hackers have found yet another way to trick devs into downloading malware from GitHub

Threat actors have developed a new way to covertly embed malicious files into legitimate repositories on both GitHub and GitLab using the comment section

files found github gitlab hackers malicious malware repositories security threat threat actors trick