The Octopus Scanner malware, which targets the Apache NetBeans Java integrated development environment (IDE), has been nesting in at least 26 GitHub source-code repositories, according to researchers – waiting to take over developer machines. A team from GitHub Security Labs, acting on a tip from a white-hat going by “JJ,” has found that the malware hides within GitHub-hosted open-source code bases, waiting to for developers to download a project from an infected repository.

Read full article on Threat Post