SEO poisoning

Attackers impersonated hundreds of brands on GitHub to push malware through search results

A campaign beginning in late June 2026 built hundreds of fake brand repositories on GitHub and used SEO to place them at the top of software download searches.