I discovered a large-scale malware distribution on GitHub

▤ Summary

The article describes a large-scale malware distribution campaign hidden inside GitHub repositories. It explains how the author identified repositories that repeatedly overwrite commits and point to zip archives containing Trojan malware. The write-up details a script and filtering approach used to find thousands of matching repositories across GitHub. It also argues that GitHub’s current detection does not automatically catch this pattern and that the campaign may be much larger than first thought.

▦ Linked Companies

Google LLC

$100M to $250M

Telegram Messenger

$1M to $5M