Fake Go DNS scanner spread malware through over 200 GitHub repos — 'Operation Muck and Load' has published 700 malicious modules since January

A sophisticated malware campaign named 'Operation Muck and Load' has been spreading malicious code through GitHub, targeting over 200 repositories with fake Go DNS scanner modules. Since its inception on January 24, the campaign has released over 700 harmful versions, tricking developers into downloading and executing the malware. This widespread attack highlights a growing trend of cybercriminals exploiting popular code repositories, posing significant risks to developers and the broader software ecosystem. The discovery underscores the need for enhanced security measures and vigilance in open-source project management.