GitHub projects targeted with malicious commits to frame researcher
ID: 263c4f42-af02-5f44-bfac-befde81dee6f
STIX ID: report--263c4f42-af02-5f44-bfac-befde81dee6f
Feed Name: Bleeping Computer
Threat Score
Attackers submitted seemingly innocent pull requests to multiple GitHub projects that included numeric-encoded Python intended to fetch and execute a remote "stage1" payload, effectively attempting to implant a supply-chain backdoor; several impersonated accounts were used, many PRs were flagged or removed, and the referenced payload URL returned 404 so no active payload was observed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.