NEW TECHNIQUE TO TRICK DEVELOPERS DETECTED IN AN OPEN SOURCE SUPPLY CHAIN ATTACK

Summary from the TLDR InfoSec newsletter

Attackers are manipulating GitHub search rankings by creating malicious repositories with popular names and topics and using automated updates and fake stars to deceive users. The recent campaign involves a large malware executable that targets cryptocurrency wallets, establishing persistence through a scheduled task.