Cybersecurity researchers have uncovered a campaign called GitVenom, targeting gamers and crypto investors through fake GitHub projects. The attack involves hundreds of malicious repositories disguised as useful tools (bots, cracks, automation), but in reality, they steal passwords, banking data, and cryptocurrency wallets.

Hackers use Node.js stealers, RAT tools, and clipboard clippers to hijack crypto transactions. So far, 5 BTC (~$456,600) have been stolen. The attack primarily affects users in Russia, Brazil, and Turkey.

Experts warn that GitHub and other code-sharing platforms are being weaponized, urging developers to carefully review third-party code before execution.