Stephen Lacy on Twitter: "I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositories… https://t.co/rUKIIULV4V"

I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositories… https://t.co/rUKIIULV4V

[isrc]

This attack will send the ENTIRE ENV of the script, application, laptop (electron apps), to the attacker's server! The attacker creates FAKE orgs/repos and pushes clones of LEGIT projects to github. The attacker runs arbitrary code on your server once it uploads your env