<p>GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. This ongoing attack, which has been happening for nine months, poses a substantial risk to developers and their downloads. Over 100,000 repositories on GitHub have already been infected with malicious code, making it a major security threat. The attack relies on repo confusion, tricking developers into downloading the malicious versions instead of the legitimate ones. The infected repos contain hidden payloads that collect sensitive data, often utilizing the BlackCap-Grabber. Automated detection systems struggle to identify all of the forked repositories, making mitigation efforts challenging. These malicious repositories are clones of legitimate ones, inundating the site and creating difficulty in distinguishing them. GitHub is actively working to combat this ongoing attack and protect developers from the security risks it poses.</p>


Collections

GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. Over 100,000 repositories on GitHub have already been infected with malicious code, posing a substantial risk to developers.

GitHub Battles Ongoing Attack of Malicious Forks