[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK9E_Hm47n4bQTaBc6ECoeiERiE23aEn1KziBYvwYKf4":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":19,"status":27,"created_at":28,"published_at":29,"article":30,"tags":34,"podcasts":47,"controls":48},"f98f6e5d-6e12-4e99-b292-413dce1a0beb","stolen-credentials-enable-malware-injection-across-42-github-repos-targeting-ai-dev-tools","64589c29-7e75-495a-9d17-0ff9b2fcfe1b","Stolen Credentials Enable Malware Injection Across 42 GitHub Repos Targeting AI Dev Tools","Attackers used stolen credentials to compromise 42 legitimate GitHub repositories, embedding malware disguised as initialization scripts that execute automatically when developers open projects in AI-assisted IDEs like Claude, Gemini, and Cursor. This is a classic software supply chain attack: developers inherently trust repositories they clone, making malicious code embedded within them especially dangerous. The attackers further obscured their tracks by manipulating repository history, delaying detection. This matters because a single infected repository can silently compromise hundreds or thousands of developer machines, potentially cascading into broader organizational breaches through stolen tokens, secrets, and package publishing credentials.","**Immediate actions:**\n- Audit all GitHub repository access logs for anomalous commits or history rewrites using tools like git log and GitHub's audit API.\n- Rotate all repository credentials, personal access tokens, and deploy keys for any accounts that may have been exposed.\n- Scan cloned repositories for unexpected large binary files or obfuscated scripts before executing any initialization or setup steps.\n\n**Long-term improvements:**\n- Enforce multi-factor authentication (MFA) on all accounts with write access to code repositories to prevent credential-based takeover.\n- Implement code-signing and commit verification (e.g., GPG-signed commits) so unauthorized changes to repository history are immediately flagged.\n- Adopt a software composition analysis (SCA) tool in CI\u002FCD pipelines to automatically detect newly introduced malicious or suspicious files before they reach developer machines.\n\n**Detection measures:**\n- Configure alerts for unusual repository events such as force-pushes, history rewrites, or large file additions in branch protection rules.\n- Deploy endpoint detection and response (EDR) solutions on developer workstations capable of flagging unexpected script execution triggered by IDE automation.",[12,13,14,15,16,17,18],"CIS Control 7: Continuous Vulnerability Management","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","MITRE ATT&CK T1566: Phishing","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","CIS Control 14: Security Awareness and Skills Training",{"MITRE ATT&CK T1566: Phishing":20,"NIST SP 800-53 SI-2: Flaw Remediation":21,"OWASP A06:2021 Vulnerable and Outdated Components":22,"CIS Control 7: Continuous Vulnerability Management":23,"CIS Control 14: Security Awareness and Skills Training":24,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":25,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":26},"Credential theft (likely via phishing or credential stuffing) was the enabler of repository access, making anti-phishing controls and credential hygiene directly relevant to preventing this attack.","Maintaining integrity verification of software artifacts and promptly identifying unauthorized modifications aligns with SI-2 controls that would have caught the malicious script injections.","Developers blindly trusting and executing repository scripts without verification mirrors the OWASP risk of using unvalidated components, which OWASP A06 specifically calls organizations to govern through provenance and integrity checks.","Regular scanning of third-party repositories and dependencies for malicious or unexpected content would have surfaced the embedded malware scripts before developer machines executed them.","Developers need targeted training to recognize supply chain risks such as suspicious initialization scripts and unexpected repository changes before executing code from external sources.","This control requires organizations to monitor and manage vulnerabilities in software assets, including third-party and open-source code, which would encompass detecting tampered initialization scripts in cloned repositories.","Stolen credentials were the initial access vector; enforcing MFA and least-privilege access on repository accounts directly addresses how attackers gained write access to the 42 repositories.","published","2026-10-28T06:20:21.939749+00:00","2026-10-28T06:20:21.907+00:00",{"id":7,"url":31,"slug":32,"title":33},"https:\u002F\u002Fcybersecuritynews.com\u002Fhackers-hijack-42-github-repositories\u002F","hackers-hijack-42-github-repositories-to-plant-malware-traps-for-claude-gemini-a-dbf956","Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users",[35,41],{"id":36,"name":37,"slug":38,"description":39,"color":40},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":42,"name":43,"slug":44,"description":45,"color":46},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[49,53,57],{"slug":50,"name":51,"problem":52},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":54,"name":55,"problem":56},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":58,"name":59,"problem":60},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship."]