…GitHub tokens and GitHub Actions secrets npm, PyPI, RubyGems, JFrog publishing tokens AWS, GCP, Azure, Kubernetes, and Vault credentials SSH keys Docker credentials .env, .npmrc, .pypirc Shell histories Claude/MCP configuration files…
…When GitHub credentials are available, the malware uses the GitHub API to automatically create new repositories under the victim’s account and upload the stolen data to them. Socket has found 1…
…The Shai-Hulud campaign emerged last September and had multiple iterations [ 1 , 2 , 3 ], some of them exposing hundreds of thousands of developer secrets in automatically generated GitHub repositories. Among more recently…
…Later attack waves extended to GitHub repositories and npm packages, with one campaign in March impacting more than 400 software artifacts . In a more recent attack, Glassworm operators planted dozens of dormant…
…The malware emerged on GitHub last week, with a message allegedly from TeamPCP saying "Here We Go Again - Let the Carnage Continue. A Gift from TeamPCP." The chalk-tempalte package appears to…
…This behavior is conceptually similar to Shai Hulud , which had its code published on GitHub recently. Although JFrog researchers did not find a clear connection between IronWorm and Shai Hulud, they observed…
…How to Spot it Before it Empties Your Wallet Ukraine identifies infostealer operator tied to 28,000 stolen accounts GitHub investigates internal repositories breach claimed by TeamPCP Microsoft blames macOS update for…
…McAfee explains that many of those projects do not have official websites, only GitHub pages. In one case highlighted in the report, the malicious website displays a security notice warning visitors that…
…McAfee explains that many of those projects do not have official websites, only GitHub pages. In one case highlighted in the report, the malicious website displays a security notice warning visitors that…
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.
