JFrog found that testmetest, a worm that steals credentials through npm packages, had embedded malicious code in 42 real third-party GitHub repositories. The repositories span 11 legitimate owners and include organization repositories.

Key points

What happened: JFrog found that the testmetest npm worm had embedded roughly 13 MB of obfuscated code in 42 real GitHub repositories belonging to 11 owners.

Why it went undetected: Attack files exceeded GitHub code search and Contents API indexing limits, making their very existence invisible to ordinary inspection methods.

What makes it dangerous: Configuration files for Claude Code, Gemini CLI, Cursor, and VS Code launch attack code simply when a repository is opened.…