Filtered by tag: software development × Clear
Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users
Matched: health
Hackers compromised 42 GitHub repositories belonging to 11 legitimate owners, planting malware that activates when developers open projects in Claude, Gemini, Cursor, or VS Code. Hidden in oversized files (.github/init.js, 12-13MB), the code exploits startup hooks in AI coding tools. JFrog researchers linked the campaign to a broader npm worm, with payloads designed to steal credentials and self-propagate. No confirmed victims were reported.