# Malware attack on GitHub

**URL:** https://meta.discourse.org/t/malware-attack-on-github/234965
**Category:** Development
**Created:** [August 3, 2022, 9:46am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965 "2022-08-03T09:46:20Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![MarcP](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/marcp/32/160184_2.png) [@MarcP](https://meta.discourse.org/u/MarcP)
#### Post date: [August 3, 2022, 9:46am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965/1 "2022-08-03T09:46:20Z")

</div>

Sharing this here to get awareness for devs because Discourse might be using one of the infected repo’s..

[https://twitter.com/stephenlacy/status/1554697077430505473?s=20&t=6b3tOdjxaTUQIUXGTWLqmg](https://twitter.com/stephenlacy/status/1554697077430505473?s=20&t=6b3tOdjxaTUQIUXGTWLqmg)

---

<div class="post-metadata">

### Author: ![Mr.X\_Mr.X](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mr.x_mr.x/32/126610_2.png) [@Mr.X\_Mr.X](https://meta.discourse.org/u/Mr.X_Mr.X)
#### Post date: [August 3, 2022, 10:23am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965/2 "2022-08-03T10:23:51Z")

</div>

The infected repos are clones of the originals, the originals are OK.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [August 3, 2022, 10:33am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965/3 "2022-08-03T10:33:00Z")

</div>

We’re not aware of any impact to Discourse or our dependencies.

As @Mr.X_Mr.X mentioned, the tweet author has admitted that the findings were limited to forks/clones, rather than the true versions of dependencies:

[https://twitter.com/stephenlacy/status/1554697086158876674](https://twitter.com/stephenlacy/status/1554697086158876674)

---

<div class="post-metadata">

### Author: ![MarcP](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/marcp/32/160184_2.png) [@MarcP](https://meta.discourse.org/u/MarcP)
#### Post date: [August 3, 2022, 10:38am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965/4 "2022-08-03T10:38:45Z")

</div>

Ah that is good to know. Better safe then sorry, haha. Felt this was a place where devs at least should be aware of the malware.

---

<div class="post-metadata">

### Author: ![miss](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/miss/32/265671_2.png) [@miss](https://meta.discourse.org/u/miss)
#### Post date: [August 3, 2022, 11:15am UTC](https://meta.discourse.org/t/malware-attack-on-github/234965/5 "2022-08-03T11:15:12Z")

</div>

Welcome to internet! 😀