Worm armed 42 GitHub repos by hiding a payload too big to fail

malware

Worm armed 42 GitHub repos by hiding a payload too big to fail

A new npm worm, dubbed ‘testmetest’, has been discovered by JFrog, targeting 42 real GitHub repositories belonging to developers and organizations.

The Register · 23h ago CriticalCVSS 9.8KEVEPSS 99%

CVE-2026-41940 npm github supply chain

threat-intel

Australia’s spies are sharing intelligence with hacking targets — and want them to share back

Australia’s signals intelligence agency, the Australian Signals Directorate (ASD), is sharing intelligence with cyber targets and requesting they share back, significantly increasing its cyber threat notifications to ove…

The Record · 9h ago Info

HO intelligence sharing cyber threat notification ransomware

news.mlab.sh

Worm armed 42 GitHub repos by hiding a payload too big to fail

Worm armed 42 GitHub repos by hiding a payload too big to fail

Australia’s spies are sharing intelligence with hacking targets — and want them to share back