More than 100,000 GitHub repositories found spreading malicious packages

Security researchers at Apiiro have recently uncovered a malware-spreading campaign designed to exploit the capabilities of the GitHub platform. The attack, which started in May 2023 with "several" malicious packages uploaded to the Python Package Index (PyPI) official repository, was capable of impacting at least 100,000 GitHub repositories and "presumably" millions more.

Read Entire Article

apiiro attack campaign capabilities exploit found github github repositories malicious malicious packages malware may may 2023 millions official package packages platform pypi python python package python package index repositories repository researchers security security researchers uncovered