Jul 11, 2026
5 itemsDaily Cyber Digest: 2026-07-10
July 10, 2026 roundup: AI-driven patch pressure, a 200+ GitHub malware network, active Django SQLi, HalluSquatting, and a malicious Injective npm SDK.
Tag archive
Tagged: github
All visible posts matching this normalized tag.
NEWS
Operation Muck and Load: 222 GitHub Repos Push Windows Malware via Fake Go Module
Socket tracks 'Operation Muck and Load', a 222-repo GitHub lure network that uses a fake Go module to drop RATs, infostealers, and cryptominers.
Jul 11, 2026 5 min read High Severity
NEWS
npm 12 turns on install-time security defaults and phases out 2FA-bypass tokens
npm 12 now blocks dependency install scripts, Git dependencies, and remote tarballs by default while GitHub phases out high-risk 2FA-bypass token operations.
Jul 09, 2026 4 min read Medium
NEWS
Miasma worm hits Microsoft GitHub repositories
Microsoft temporarily disabled repositories after reports of Miasma worm activity targeting developer IDE and AI coding tool workflows.
Jul 01, 2026 4 min read High Severity
NEWS
Nx Console supply-chain compromise highlights GitHub and CI/CD exposure
CISA, GitHub, and Nx describe a May 2026 supply-chain compromise that reached developer tooling, repository access, and secret rotation.
Jun 27, 2026 5 min read High Severity
NEWS
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
StepSecurity, SafeDep, and The Hacker News describe a Miasma supply chain incident that led GitHub to disable 73 Microsoft repositories after malicious AI-tool and IDE startup hooks were planted.
Jun 27, 2026 5 min read High Severity