A list of affected GitHub repositories can be found at the bottom of this blog post. The projects which have been forked appear to be chosen at random. The cybercriminals fork other projects, which on Github means producing a copy of someone else’s project, to build upon the project or to use as a starting point and subsequently push a new commit with the malware to the project. Cryptocurrency mining malware, which also installs a malicious Chrome extension, hosted on GitHub for anyone to download.Ĭybercriminals are aggressively uploading cryptocurrency mining malware to GitHub.
