BANANA SQUAD HIDES DATA-STEALING MALWARE IN FAKE GITHUB REPOSITORIES

Summary from the TLDR InfoSec newsletter

A hacker group called Banana Squad hid malware in fake GitHub projects that looked like real tools. Their attacks stole sensitive data from thousands of computers before being discovered. Even though malware in open-source software dropped in 2024, attacks are getting smarter, so users need to be careful.