# Fake security tools on GitHub push backdoors and infostealers

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/) · 2026-11-06 · Security
Page: https://themorning.dev/story/fake-security-tools-on-github-push-backdoors-and-infostealers-a97be9095b72e1db
Kind: security · Impact: high

## In brief

- Fake security projects on GitHub are targeting cybersecurity professionals.
- The infected projects deploy a backdoor and an information-stealer malware.
- BleepingComputer reported the campaign on 2026-11-06.

## Why it matters

Developers and security staff who download security tools from GitHub may be infected with a backdoor and credential-stealing malware, so they should verify tools before running them.

## Timeline

- 2026-11-06: BleepingComputer reports fake security tools on GitHub pushing backdoors and infostealers

## Coverage

- [Fake GitHub Security Tools Infect Over 2,000 PCs With Malware](https://securityaffairs.com/202717/malware/fake-github-security-tools-infect-over-2000-pcs-with-malware.html) — Security Affairs, 2026-11-09
- [Fake security tools on GitHub push backdoors and infostealers](https://www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/) — BleepingComputer, 2026-11-06

Tags: github, malware, infostealer, backdoor, supply-chain

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev