An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
Summary + source link. No paywalls, no tracking.