10,000+ GitHub repos distributing Trojan payloads expose supply‑chain risk
A researcher identified over 10,000 distinct GitHub repositories that serve Trojan‑laden zip archives via readme links. The findings highlight a widespread, automated supply‑chain threat that can slip past basic malware scanners, urging platform hosts and developers to tighten repo vetting.