GitHub

The GitVenom campaign has aggressively targeted gamers and crypto investors, utilizing GitHub as a platform for hosting malicious projects. With a multitude of fake repositories that contained harmful code, the campaign has deceived users with seemingly legitimate automation tools and crypto bots. The impact of GitVenom included credential theft, unauthorized cryptocurrency transactions, and remote system control through backdoors. The damage extended to personal data compromise and financial losses for the affected users, while also tarnishing GitHub's reputation as a safe space for developers to share code.

Source: https://securityaffairs.com/174651/malware/gitvenom-campaign-targets-gamers-and-crypto-investors.html

"id": "git000030225",
"linkid": "github",
"type": "Breach",
"date": "2/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"