28 May 2026 - 08:01

Category: IT Fail

Three hundred GitHub repos poisoned

CrowdStrike, Google, and friends took down a botnet that poisoned over three hundred GitHub repositories. Who knew open source code could be so toxic?

Three hundred GitHub repos poisoned

Source: Computer Weekly

The Full Story

Severity: High Mood: Frustrating

The heroic trio of CrowdStrike, Google, and Shadowserver have cleaned up a botnet that poisoned over three hundred GitHub repositories. This massive mess affected open-source developers and threatened to trigger a glorious supply chain collapse. Dodging this particular brand of misery means we must thoroughly vet what our developers pull from public repositories. I will add that to the infinitely long list of things we do not have the time or patience to manage today.

githubpoison gitgrief
Open article →