The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.
A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...