Monday 2 November
Global

Your region, kept on this device.

DeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages

Severity
High
Sources
1

A hacking group linked to North Korea has moved on from fake job interviews to stealing developers' logins. It then uses them to hide malicious code inside trusted software projects, so anyone who downloads those projects could be infected.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. No action needed: this one is for your information.

General advice for this kind of story

Full story timeline · 1 update

  1. Fri 30 OctoberNorth Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software PackagesCyber Security News

Who reported · 1 outlet

Cyber Security News

Report a problem