28 May 2026 - 08:01
Category: IT Fail
Three hundred GitHub repos poisoned
CrowdStrike, Google, and friends took down a botnet that poisoned over three hundred GitHub repositories. Who knew open source code could be so toxic?
Source: Computer Weekly
The Full Story
The heroic trio of CrowdStrike, Google, and Shadowserver have cleaned up a botnet that poisoned over three hundred GitHub repositories. This massive mess affected open-source developers and threatened to trigger a glorious supply chain collapse. Dodging this particular brand of misery means we must thoroughly vet what our developers pull from public repositories. I will add that to the infinitely long list of things we do not have the time or patience to manage today.
githubpoison
gitgrief