Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories

Socket tracks the activity as Operation “Muck and Load”: a threat actor uses commit-farming workflows, public dead drops, and protected archives to stage Windows RAT and infostealer malware. Reported in July 2026. https://www.securityweek.com/network-of-200-github-repositories-used-for-malware-infection submitted by /u/Choobeen [link] [comments]

from hacking: security in practice https://ift.tt/YkyJigs