#force-pushed


Stolen GitHub tokens enable GlassWorm attack. Python repos force-pushed with malware.

Mar 18, 2026 // 13:26

The GlassWorm malware is being exploited in an active attack that uses compromised GitHub tokens to inject malicious code into hundreds of Python software collections. […]