Malicious code added to 35k GitHub repos, leaking user environments

• GUI-miner

  2 63 3.3 Go

  An easy to use GUI miner available for Windows, macOS and Linux

  

• gui-miner

  2 50 0.0 Go

  Discontinued An easy to use GUI miner available for Windows, macOS and Linux [Moved to: https://github.com/scala-network/GUI-miner] (by stellitecoin)

  

and it's infected clone: https://github.com/stellitecoin/gui-miner

GPG signed commits by the legitimate users do not contain the malware

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• asn1

  1 51 10.0 Go

  Discontinued Asn.1 BER and DER encoding library for golang. [Moved to: https://github.com/Logicalis/asn1] (by promonlogicalis)

  

Some of them seem like old accounts, though, like this one: https://github.com/automagically, which supposedly added it to this repo: https://github.com/promonlogicalis/asn1/commits/master/asn1....

• zcli

  1 8 7.5 Go

  Zerops command line utility

  

• asn1

  1 47 0.0 Go

That commit was rewritten from https://github.com/Logicalis/asn1/commit/d60463189a563e49f19... which was signed, but is not in the fork.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project