PolinRider Confirmed Footprint Grows 6.5x Since March

In the three months since we discovered the PolinRider campaign, we've observed it growing to become a major source of malicious activity. We recently completed a fresh hunt that surfaced an entire new wave of victims: Our July hunt uncovered 2,417 newly-compromised repos, pushing confirmed footprint to 4,367 poisoned repos across 2,152 victims.

The malware still hides in the files developers never read, it still preys on individual job-seekers rather than hardened organizations, and it still spreads through the victims’ own GitHub accounts. What this round makes new…