---
title: "Attackers compromised 42 GitHub repositories by using files too large to be searched"
type: signal
url: https://frontiernewswire.com/s/attackers-compromised-42-github-repositories-by-using-files-too-large-69c91e13
published: 2026-10-28T02:58:27.000Z
byline: "Source: CSO Online"
---

# Attackers compromised 42 GitHub repositories by using files too large to be searched

Source: CSO Online · Published 2026-10-28 · Canonical: https://frontiernewswire.com/s/attackers-compromised-42-github-repositories-by-using-files-too-large-69c91e13

A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload blobs large enough “to evade the GitHub search and API paths normally used to find this kind of compromise.” The report from JFrog Security Research said the victimized repositories contained execution hooks for AI coding assistants and IDEs, along with polymorphic wrappers as large as 13.7MB that “all decoded to the same hidden CI-publisher payload. The campaign’s attacker-owned repository also operates as an active encrypted data sink, receiving snapshot envelopes, and the attack leveraged a new camouflage: a compiled native addon that contains no payload of its own, and instead decrypts a file named .napi\_cache at runtime to reveal the real one.” JFrog said that the investigation also uncovered account hijacks, forged commit timelines, short-lived publishing branches and exposed npm credentials. Shellpanel artifacts in the same hijack

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4241496/attackers-compromised-42-github-repositories-by-using-files-too-large-to-be-searched-2.html)

## Related

- [AMD says it will invest $1B in Meta's equity offering, its first Helios rackscale systems are installed at Meta, and its EPYC CPUs power Meta's Muse AI agent (Kai Nicol-Schwarz/CNBC)](https://frontiernewswire.com/s/amd-says-it-will-invest-1b-in-metas-equity-offering-its-first-helios-10aa235b)
- [Nvidia-Backed Firm Launches $3.1 Billion GPU Loan into Market](https://frontiernewswire.com/s/nvidia-backed-firm-launches-3-1-billion-gpu-loan-into-market-a0d793ec)
- [ASMPT Sales Jump 49% on AI Demand as Chip Unit Misses Estimate](https://frontiernewswire.com/s/asmpt-sales-jump-49-on-ai-demand-as-chip-unit-misses-estimate-114825af)
- [Source: OpenAI, a major Nvidia customer, plans to buy Google's TPUs; a job listing shows it seeks an engineer to "lead the optimization" of its models on TPUs (Ryan Barwick/The Information)](https://frontiernewswire.com/s/source-openai-a-major-nvidia-customer-plans-to-buy-googles-tpus-a-job-e41af466)
- [OpenClaw openclaw 2026.10.8 is available](https://frontiernewswire.com/s/openclaw-openclaw-2026-10-8-is-available-6e34a0f0)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)