Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, for the past two months. Its operator set up repositories and GitHub.io pages for supposed apps called GPT-5.6 Sol, GPT-6 Astra and Claude Opus, and hosted the malware as ZIP releases on GitHub. “While the repositories do … More
The post Yoba malware hides in fake desktop versions of ChatGPT and Claude appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws
GitHub’s npm package firewall can block brand-new versions before they install