10,000 GitHub Repositories Found Distributing Trojan Malware
Hacker News (AI keywords)40 days agoIncidentA security researcher published findings identifying approximately 10,000 GitHub repositories that distribute Trojan malware. The scale of the campaign suggests an organized, systematic effort to abuse GitHub's trusted platform for malware distribution. Developers and open-source consumers who clone or run code from unvetted repositories are at direct risk.
A Backdoor in a LinkedIn Job Offer
Hacker News (AI keywords)42 days agoIncidentA personal blog post on roman.pt details a first-hand encounter with a backdoor hidden within a LinkedIn job offer, a social-engineering attack vector that security researchers have documented but that remains underreported in mainstream tech circles. The incident illustrates how attackers exploit the inherent trust of professional recruiting interactions to deliver malicious code to developers. The post serves as a practical reminder to run untrusted interview code only in isolated, sandboxed environments.
Mantine DataTable source repo compromised; owner account suspended★ 74
Hacker News (AI keywords)53 days agoIncidentA GitHub security notice says Mantine DataTable and other repositories received unauthorized commits through the github-actions bot. The npm packages were reported safe; the risk targets developers who recently cloned or pulled the source and open it in VS Code, Cursor, Claude Code, Gemini, or run npm test. A later update links the payload to the Miasma / Shai-Hulud worm family and says a stolen credential is the likely path.