Microsoft removed 73 GitHub repositories after the Miasma supply-chain worm compromised them to distribute password-stealing malware. All repos are restored, but the worm’s targeting of AI coding tools signals a new phase in supply-chain attacks.
A malware campaign targeting South Korea uses GitHub repositories as command-and-control servers, with malicious LNK files fetching PowerShell payloads and exfiltrating data through the developer platform.
NFCShare Android malware has expanded from targeting a single German bank to hitting financial institutions across Italy and Spain, using fake banking app updates hosted on GitHub to steal credit card data via NFC.
