Software Engineer Stephen Lacy Says GitHub Is Under Massive Malware Attack Affecting More Than 35,000 Repositories

Software engineer Stephen Lacy tweeted that GitHub was found to be suffering from a large-scale malware attack, affecting more than 35,000 code bases, covering areas such as Crypto, Golang, Python, js, bash, Docker, and k8s. The malware was found to be added to npm scripts, Docker images, and installation documents. Stephen Lacy warns that this attack may reveal multiple keys of the victim to the attacker, and recommends that users use GPG to sign all submissions.