Caution: Widespread Malware Clone Crypto Code Hits File Available on GitHub

Share this:
1 min, 8 s

A recent report claims there is a widespread malware attack on GitHub which has affected over 35,000 code hits including;

Thank you for reading this post, don't forget to subscribe!

Join Telegram Group

  • Crypto 
  • GoLang
  • Python
  • Js
  • Bash
  • Docker
  • K8s 

This malware is reportedly added to npm scripts, docker images and install docs files. This malware exists in install docs such that a user downloading the installation files for desktop or mobile on GitHub gets to download the infected file. 

But recent claims suggests that it’s a creation from attackers which doesn’t affect original file created by the original author but rather creates an option which can confuse users downloading files.

How it Works

This attack will send the ENTIRE ENV of the script, application, and laptop (electron apps), to the attacker’s server when downloaded. These ENVs include:

  • Security Keys
  • AWS access keys
  • Crypto Keys (including private keys and seed phrase).

The attacker creates fake organisations /repositories and pushes clones of Legit projects to github. So when a user gets to github, he ends up downloading the clone and the original file is not accessed and the author gets blame not the hacker.

The attacker runs an arbitrary code on your server once the file is downloaded and he uploads your env. 

Caution: Users are advised to always use the correct link from the originating author on GitHub before downloading any file.

Diutocoinnews Admin. Send all publications to

Content Developer | Blogger | SEO Manager | Web Administrator | Web Designer | Copyrighter | Journalist|

Leave a Reply

Previous post Solana Wallet Exploit On-going, Users Advised to Move Funds to FTX.
Next post More Woes For Flutterwave As Bank Of Ghana Opens Investigation for The African Fintech Start-up.
Follow us on Social Media