Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users
Hackers compromise 42 GitHub repos to deliver malware via AI coding tools.
Attackers have compromised 42 legitimate GitHub repositories, embedding large malware files disguised as initialization scripts. These malicious files are designed to execute when developers open projects using AI coding assistants like Claude, Gemini, and Cursor, or IDEs like VS Code. The attackers manipulated repository history to mask their activity and used stolen credentials to gain access, aiming to create a self-sustaining ecosystem of stolen access and malicious package releases.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Claude?
Get an email when a new story names Claude, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers used stolen credentials to compromise 42 legitimate GitHub repositories, embedding malware disguised as initialization scripts that execute automatically when developers open projects in AI-assisted IDEs like Claude, Gemini, and Cursor. This is a classic software supply chain attack: developers inherently trust repositories they clone, making malicious code embedded within them especially dangerous. The attackers further obscured their tracks by manipulating repository history, delaying detection. This matters because a single infected repository can silently compromise hundreds or thousands of developer machines, potentially cascading into broader organizational breaches through stolen tokens, secrets, and package publishing credentials.
What helps against this
How we list vendors
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — testmetest
- malware — TrapDoor
- cve — CVE-2026-41940