I DISCOVERED A LARGE-SCALE MALWARE DISTRIBUTION ON GITHUB

Summary from the TLDR Dev newsletter

A large-scale malware distribution campaign has been uncovered on GitHub, involving 10,000 repositories that contain Trojan malware disguised under various names by different contributors. These repositories consistently update their readme files to include links to a zip archive that contains the malicious software, while frequently deleting and re-adding the same commits, which complicates detection.