Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...
Infosecurity Magazine

Open Directory Exposes Three Evilginx Phishing Operators

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...
The Hacker News

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
GitHub

Pyodide is a Python distribution for the browser and Node.js based on WebAssembly.

Pyodide is a port of CPython to WebAssembly/Emscripten. Pyodide makes it possible to install and run Python packages in the browser with micropip. Any pure Python ...
GitHub

A quick and dirty HTTP/S "organic" traffic generator.

Just a simple (poorly written) Python script that aimlessly "browses" the internet by starting at pre-defined ROOT_URLS and randomly "clicking" links on pages until the pre-defined MAX_DEPTH is met. I ...