Brind.
  1. Attackers are exploiting developer platforms and content sites to distribute malware and run phishing campaigns, leveraging GitHub, SourceForge, WordPress, and YouTube.

Malicious packages were found cloning legitimate project structures within the npm ecosystem hosted on GitHub.

2 reports, 2 independent Updated Aug 14
Gone quiet
Reports
2
Developments
2
Repetition
0%

New informationRepeats or wire copies

AI-generated analysis. Brind wrote this summary from the reports listed below. It can be wrong. Each section says how much you can rely on it, and the sources are linked so you can check.

What happened

Some supportReported by 2 outlets

Malicious packages were found cloning legitimate project structures within the npm ecosystem hosted on GitHub.

Who's involved

What this event is mainly about
GitHub

How it developed

Newest first. Tap a step to see who reported it.
  1. Snyk monitored malicious package availability in the npm ecosystem.1 source
  2. Malicious packages were found cloning legitimate project structures on GitHub/npm.1 source

Keep exploring

Part of

Attackers are exploiting developer platforms and content sites to distribute malware and run phishing campaigns, leveraging GitHub, SourceForge, WordPress, and YouTube. All 2 developments

The entities involved

Coverage

Newest first; wire copies grouped