GitHubのcrypto、golang、python、js、bash、docker、k8s系リポジトリで広範囲のマルウェア攻撃が見つかったらしい
>Stephen LacyさんはTwitterを使っています: 「I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositories are infected - So far found in projects including: crypto, golang, python, js, bash, docker, k8s - It is added to npm scripts, docker images and install docs 」 / Twitter
https://twitter.com/stephenlacy/status/1554697077430505473?s=12&t=I_b3LwmRGlQUexDj1PVdag