Microsoft investigates malware injection in open-source projects
Story essentials
Microsoft
Global
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policyRead next
Prioritized by shared people, places, and events.
Discover-Tech linked to spyware distribution via online advertising
Citizen Lab identified 'AdFection' campaign using ad infrastructure for spyware. Discover-Tech identified as a major ad buyer for Starlink users, potentially for data harvesting. TrendAI reports Discover-Tech (Shadow-Earth-79) is a dominant ad buyer in multiple countries.
Related book
The Supply Chain Attacks: A Guide to Securing the Software Development Lifecycle
Author: John P. Mello Jr.
This book provides a comprehensive overview of how modern software supply chains are targeted by malicious actors, explaining the mechanics of how compromised repositories and dependencies can lead to widespread security breaches, which is central to the Microsoft/GitHub incident.
As an Amazon Associate, COMPAMIR earns from qualifying purchases.