Attackers Finding Novel Ways to Abuse GitHub: ReversingLabs

Threat actors are using GitHub to spread malicious code through popular repositories like Python Package Index (PyPI), according to researchers at ReversingLabs. Cyber criminals are finding new ways to exploit the software supply chain, using methods that evade detection tools. Most recently, hackers have been using GitHub gists to host two-stage malicious payloads and fetching commands from git commit messages. All the malicious PyPI packages have now been removed.