Back Scworld

PyStoreRAT malware spread via counterfeit developer tools

Scworld • December 12, 2025

In this photo illustration, the homepage of the GitHub website seen on a computer screen through a magnifying glass. (Photo Illustration by Rafael Henrique/SOPA Images/LightRocket via Getty Images)

SC Staff December 12, 2025

You can skip this ad in 5 seconds

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PyStoreRAT Malware Targets Developers via GitHub Accounts A new supply chain attack has emerged, utilizing dormant GitHub accounts to spread PyStoreRAT, a previously undocumented malware. This sophisticated attack primarily targets developers by distributing counterfeit developer tools. The incident highlights vulnerabilities in software supply chains and the potential for significant impact on development environments. 2 sources 45

PyStoreRAT malware spread via counterfeit developer tools

The full story

Extracted Entities

Attack Types (1)

Malware (1)