Hackers Post Dozens of Malicious Copycat Repos to GitHub

**Executive summary:** ReversingLabs and researchers observed a campaign by the cybercriminal group "Banana Squad" that posted ~67 copycat, typosquatted GitHub repositories designed to look like legitimate Python hacking tools and hide malicious payloads (including an infostealer) using obfuscation techniques such as appending code after long trailing spaces; this shift from package registries to source repositories reflects attackers adapting to improved package-security controls while continuing to pose supply-chain and credential-exposure risks.