#malware
Tagged “malware”
2 articlesSecurity & supply chain
The arrayref takeover is the crates.io threat model, not a surprise
A DevOps.com report says attackers took over the maintainer account behind the popular Rust crate arrayref and pushed four additional attacker-owned crates carrying information-stealing malware. The more useful question for CI/CD teams is what your build farm did with that code before anyone noticed.
Aug 22, 2026 · Tomás VegaSecurity & supply chainFakeGit floods GitHub with malicious repos aimed at coding agents
Island researchers say a campaign called FakeGit spun up about 7,600 malicious GitHub repositories, many posing as AI skills or MCP servers, to hand SmartLoader and StealC to developers and to the agents fetching capabilities on their behalf.
Jul 24, 2026 · Maya Okonkwo