Orchid Files

A pseudonymous researcher at Orchid Files discovered roughly 10,000 trojan repositories on GitHub that were clones of their own project with malicious download links. GitHub deleted all 10,000 within …

Thousands of GitHub repositories have been distributing Trojans via ZIP archives for two years, according to an analysis by security researcher Orchid Files. The researcher found that repositories sha…

A campaign of roughly 10,000 GitHub repositories has been distributing Trojans for over a year by cloning legitimate projects, injecting malicious download links, and evading detection through commit-…