[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPUH1JLWmYZ4iuOS7E4CJTnmnbOqXiM-_VsTSawNusMU":3},{"article":4,"iocs":54,"watch_terms":65,"solutions":66,"lesson":156},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"64589c29-7e75-495a-9d17-0ff9b2fcfe1b","Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users","hackers-hijack-42-github-repositories-to-plant-malware-traps-for-claude-gemini-a-dbf956","Hackers have quietly planted malware in 42 real GitHub repositories. The traps fire when a developer opens a project with Claude, Gemini, Cursor, or VS Code. The repositories belong to 11 legitimate owners, including individual developers, students, and one company. The hidden code sits in a file named .github\u002Finit.js, and it is huge, between 12.9 […] The post Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users appeared first on Cyber Security News.","Attackers have compromised 42 legitimate GitHub repositories, embedding large malware files disguised as initialization scripts. These malicious files are designed to execute when developers open projects using AI coding assistants like Claude, Gemini, and Cursor, or IDEs like VS Code. The attackers manipulated repository history to mask their activity and used stolen credentials to gain access, aiming to create a self-sustaining ecosystem of stolen access and malicious package releases.","Hackers compromise 42 GitHub repos to deliver malware via AI coding tools.","https:\u002F\u002Fcybersecuritynews.com\u002Fhackers-hijack-42-github-repositories\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FHackers-Hijack-42-GitHub-Repositories-to-Plant-Malware-Traps-for-Claude-Gemini-and-Cursor-Users.webp","2026-10-28T05:58:08+00:00","2026-10-28T06:00:05.415309+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"Claude","product",{"name":21,"type":19},"Gemini",{"name":23,"type":19},"Cursor",{"name":25,"type":19},"VS Code",{"name":27,"type":19},"GitHub Actions",{"name":29,"type":30},"npm","technology","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":31,"icon":33,"name":34,"slug":35},null,"Supply Chain","supply-chain",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,58,61],{"type":43,"value":56,"context":57},"testmetest","npm worm campaign",{"type":43,"value":59,"context":60},"TrapDoor","supply chain campaign targeting AI coding assistants",{"type":62,"value":63,"context":64},"cve","CVE-2026-41940","Vulnerability in cPanel and WHM systems",[18,21,23],{"controls":67,"vendors":149},[68,97,123],{"slug":69,"name":70,"problem":71,"products":72},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[73,81,89],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":98,"name":99,"problem":100,"products":101},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[102,110,115],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":111,"product_name":112,"url":113,"description":114},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":124,"name":125,"problem":126,"products":127},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[128,136,144],{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":145,"product_name":146,"url":147,"description":148},"jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",[150,153],{"slug":90,"name":91,"logo_path":92,"roles":151},[152],"affected",{"slug":137,"name":138,"logo_path":139,"roles":154},[155],"reported_by",{"slug":157,"title":158,"body":159,"framework_refs":160,"framework_notes":168},"stolen-credentials-enable-malware-injection-across-42-github-repos-targeting-ai-dev-tools","Stolen Credentials Enable Malware Injection Across 42 GitHub Repos Targeting AI Dev Tools","Attackers used stolen credentials to compromise 42 legitimate GitHub repositories, embedding malware disguised as initialization scripts that execute automatically when developers open projects in AI-assisted IDEs like Claude, Gemini, and Cursor. This is a classic software supply chain attack: developers inherently trust repositories they clone, making malicious code embedded within them especially dangerous. The attackers further obscured their tracks by manipulating repository history, delaying detection. This matters because a single infected repository can silently compromise hundreds or thousands of developer machines, potentially cascading into broader organizational breaches through stolen tokens, secrets, and package publishing credentials.",[161,162,163,164,165,166,167],"CIS Control 7: Continuous Vulnerability Management","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","MITRE ATT&CK T1566: Phishing","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","CIS Control 14: Security Awareness and Skills Training",{"MITRE ATT&CK T1566: Phishing":169,"NIST SP 800-53 SI-2: Flaw Remediation":170,"OWASP A06:2021 Vulnerable and Outdated Components":171,"CIS Control 7: Continuous Vulnerability Management":172,"CIS Control 14: Security Awareness and Skills Training":173,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":174,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":175},"Credential theft (likely via phishing or credential stuffing) was the enabler of repository access, making anti-phishing controls and credential hygiene directly relevant to preventing this attack.","Maintaining integrity verification of software artifacts and promptly identifying unauthorized modifications aligns with SI-2 controls that would have caught the malicious script injections.","Developers blindly trusting and executing repository scripts without verification mirrors the OWASP risk of using unvalidated components, which OWASP A06 specifically calls organizations to govern through provenance and integrity checks.","Regular scanning of third-party repositories and dependencies for malicious or unexpected content would have surfaced the embedded malware scripts before developer machines executed them.","Developers need targeted training to recognize supply chain risks such as suspicious initialization scripts and unexpected repository changes before executing code from external sources.","This control requires organizations to monitor and manage vulnerabilities in software assets, including third-party and open-source code, which would encompass detecting tampered initialization scripts in cloned repositories.","Stolen credentials were the initial access vector; enforcing MFA and least-privilege access on repository accounts directly addresses how attackers gained write access to the 42 repositories."]