#malware
// 6 transmissions tagged with #malware
Malicious git hooks found in take‑home interview projects
CITIZENDOT uncovered git hooks hidden in interview code that steal SSH keys and other credentials, exposing candidates to a supply‑chain attack. The hooks install silently and give attackers persistent access to a developer’s machine.
New Android malware strain discovered by F-Droid
F-Droid’s security team has identified a previously unknown Android malware family that can evade detection and exploit device vulnerabilities. The findings, discussed on Hacker News, raise immediate concerns for developers and security teams.
10,000 github repos distribute trojan-laden zip archives
A researcher found 10,000 GitHub repositories hosting zip archives with Trojan payloads, evading GitHub's automated security scans by repeatedly deleting and recreating commits [DevTo].
FBI director Kash Patel's apparel site hosts clickfix malware
The website for FBI director Kash Patel's apparel brand is actively hosting a 'ClickFix' attack that tricks visitors into installing malware, PCMag reported May 23, 2026 [PCMag]. The malicious script was delivered through a third-party service on the site.
Mini Shai-Hulud malware hits 314 npm packages
The Mini Shai-Hulud malware has compromised 314 npm packages by injecting obfuscated malicious code, according to SafeDep.
AI-generated malware bypassing detection. The trend is now measurable.
AI-generated malware is slipping past traditional signature and behaviour detection. The barrier to technically sophisticated attacks dropped materially in 2025-2026. Defensive playbooks need updating.