Skip to main content
See every side of every news story
Published • loading... • Updated

Worm armed 42 GitHub repos by hiding a payload too big to fail

Summary by The Register
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search

4 Articles

The RegisterThe Register
Reposted by
IT Security News - cybersecurity, infosecurity newsIT Security News - cybersecurity, infosecurity news
Center

Worm armed 42 GitHub repos by hiding a payload too big to fail

Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search

·London, United Kingdom
Read Full Article

It's bad code that works before the app even goes off.

A npm worm prepared 42 GitHub repositories and hid their malicious loads in files too large to appear in some regular searches. JFrog links the campaign with hijacked accounts, theft of credentials and mechanisms to spread between development packages and tools.

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources are Center
100% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

The Register broke the news in London, United Kingdom on Monday, October 26, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal