A malicious repo confusion campaign, impacting over 100,000 GitHub repositories, involves the flooding of infected repos identical to trusted ones. Unsuspecting developers using these repos may be exposing themselves to malware that steals credentials and personal data.
















