Story
I found 10k GitHub repositories distributing Trojan malware
1 report
1 website
1 discussion
Latest report
Overview
A large-scale malware distribution campaign on GitHub has been identified, involving 10,000 repositories that distribute Trojan malware. These repositories originate from different contributors and share a common pattern, enabling the creation of a script to find them.
Summary from orchidfiles.com.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · orchidfiles.com
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-06-18.
- Praise: The ability to audit open-source software provides a level of transparency that proprietary software lacks, allowing users to verify the code they run.
- Praise: Using password managers can enhance security by preventing users from entering credentials on phishing sites, highlighting the importance of good security practices.
- Concern: The prevalence of Trojan malware in GitHub repositories raises serious concerns about the reliability of open-source software as a safe option for developers.
- Concern: GitHub's lack of effective moderation for malicious repositories undermines trust in the platform, making it a risky environment for users seeking legitimate software.