Thousands of GitHub Repos Still Harbor Active Malware—Here's How to Check

A pervasive supply-chain malware is silently infecting thousands of GitHub repositories through compromised credentials, remaining undetected because it disguises itself as legitimate commits. Most victims have no idea their repos are infected, as the malware only activates when developers use common tools like npm or AI-assisted editors, potentially spreading to entire dependency chains. Knowing how to identify and safely remediate the infection is critical to prevent further supply-chain compromise.