NewsThe Register — Security
Worm armed 42 GitHub repos by hiding a payload too big to fail
Teaser from the source
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on GitHub
Other advisories
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-63209CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-h7wr-284f-5qvcGHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-cxf3-9h37-7rr8GHSA-cxf3-9h37-7rr8 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-f48p-c9v4-h7xvGHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-9969-6676-49h5GHSA-9969-6676-49h5 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53492CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53714CVE-2026-53714 in github.com/envoyproxy/gateway - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-46385CVE-2026-46385 in github.com/hamba/avro/v2 - Patched by Root
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
ID