← Back to feed
general Help Net Security

GitHub Dependabot malware alerts now cover eight ecosystems

Help Net Security GitHub

GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.

T1598 1 IOC
Read the full story Help Net Security →

Related Coverage

general Hundreds of Leaked GitHub App Keys Still Authenticate Infosecurity Magazine · Sep 23 general InfraTrust report warns network management systems under attack BleepingComputer · Sep 23 general FBI investigating alleged ShinyHunters breach of its jobs site The Record · Sep 23