News
threat-intel 12 Email Encryption Solutions: The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity Fake Firefox Crypto Wallet Extensions Hide Malware Inside Mozilla-Signed Add-on Packages - CyberPress cybersecurity XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code - CyberPress cybersecurity Hackers Demand $50 Million From GMO Internet, Threaten Ransomware Attack on Customer Systems - CyberPress threat-intel Hackers Attempt to Breach U.S. Election Commission Systems, Triggering Major Service Outage - GBHackers cybersecurity Compromised Camera Management Software Lets Hackers Deploy Malware and Maintain Remote Access - CyberPress cybersecurity Hackers Deploy 44 AI Agents to Automate Cyberattacks Against Japanese Organizations - CyberPress cybersecurity Hackers Abuse DNS Records on Government and School Domains to Run Illegal Gambling SEO Campaigns - CyberPress cybersecurity Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach - The Hacker News cybersecurity Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users - CyberPress cybersecurity Critical GoAhead Vulnerability Lets Attackers Authenticate Using Revoked Certificates - CyberPress threat-intel Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication - GBHackers cybersecurity Microsoft Whistleblower Alleges India-Based Engineer Accessed U.S. Government Cloud Logs - CyberPress threat-intel Hackers Abuse Indian Government Domains to Push Illegal Gambling Websites Through Google Search - GBHackers cybersecurity Critical UEFI Firmware Flaw Allows Attackers to Execute Code Before Windows or Linux Boots - CyberPress
1 / 15
All news ›
Threat Intel

Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware

GBHackers ·

Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that combines credential theft, development-tool execution hooks, and malicious package publishing. The findings establish that the campaign extended beyond attacker-controlled test packages into established developers’ repositories. Researchers Guy Korolevski and Yair Benamou uncovered oversized payload […] The post Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.