GitHub says that when other users would download any of the 26 projects, the malware would behave like a self-spreading virus and infect their local computers.

The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform that’s greenlit in many enterprise networks that rely on the code repository for the software they develop.

GitHub is now also a CVE CNA and can issue its own CVE numbers for bugs disclosed in projects hosted on the platform.

Researchers use the OpenSSF Scorecard to measure the security of the 50 most popular generative AI large language model projects on GitHub.

Both Azure DevOps and GitHub are powerful tools for developer teams that need to facilitate communication, ensure collaboration and manage their projects.