I found 10k GitHub repositories distributing Trojan malware

- The article describes a security researcher's discovery that thousands of GitHub repositories (code hosting platform owned by Microsoft) are actively distributing Trojan malware — software that appears legitimate but contains hidden malicious code. - GitHub is the world's largest source code host, used by millions of developers to store, share, and collaborate on software projects. Its popularity makes it a prime vector for supply-chain attacks, where malware infects victims through trusted distribution channels. - A "Trojan" is a type of malware that disguises itself as a useful or harmless program to trick users into installing it. - The finding suggests malicious actors are abusing GitHub's open infrastructure to spread malware at scale, potentially affecting developers who download and run code from these repositories, which can then spread to the systems and networks those developers work on. - This builds on a growing pattern: cybercriminals increasingly target software supply chains (e.g., the 2020 SolarWinds breach, malicious npm/pip packages) to compromise many victims through a single infected dependency or codebase.