cryptoclippers

Fake stars lull unsuspecting developers to sleep. Hackers have started using the search function on GitHub to trick users who search for popular repositories, forcing them to download fake packages containing malware. The latest attack on the open source software supply chain was reported by...