--- title: GitHub Battles Ongoing Attack of Malicious Forks | daily.dev description: GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. Over 100,000 repositories... canonical: https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub Battles Ongoing Attack of Malicious Forks | daily.dev og:description: GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. Over 100,000 repositories... og:url: https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33 og:image: https://api.daily.dev/og/posts/nxkhBTQ33.png og:image:alt: GitHub Battles Ongoing Attack of Malicious Forks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub Battles Ongoing Attack of Malicious Forks **[Collections](https://daily.dev/sources/collections)** · 1 min read · 4 upvotes · 0 comments ## Summary GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. Over 100,000 repositories on GitHub have already been infected with malicious code, posing a substantial risk to developers. ## Content GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. This ongoing attack, which has been happening for nine months, poses a substantial risk to developers and their downloads. Over 100,000 repositories on GitHub have already been infected with malicious code, making it a major security threat. The attack relies on repo confusion, tricking developers into downloading the malicious versions instead of the legitimate ones. The infected repos contain hidden payloads that collect sensitive data, often utilizing the BlackCap-Grabber. Automated detection systems struggle to identify all of the forked repositories, making mitigation efforts challenging. These malicious repositories are clones of legitimate ones, inundating the site and creating difficulty in distinguishing them. GitHub is actively working to combat this ongoing attack and protect developers from the security risks it poses. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github) [View this post on daily.dev](https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub Battles Ongoing Attack of Malicious Forks","url":"https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33"},"datePublished":"2024-02-29T16:41:10.940Z","dateModified":"2024-02-29T16:41:09.954Z","description":"GitHub is facing a significant security challenge as it is being flooded with millions of malicious forks of software repositories. Over 100,000 repositories...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c93f69d76bec1d309d4c06e3d88a9935?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c93f69d76bec1d309d4c06e3d88a9935?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-battles-ongoing-attack-of-malicious-forks-nxkhbtq33","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"GitHub Battles Ongoing Attack of Malicious Forks"}]} ```