ForceMemo Hijacks GitHub Accounts, Backdoors Hundreds of Python Repos via Force-Push

A new malware campaign tracked as ForceMemo is quietly compromising hundreds of GitHub accounts and injecting hidden malicious code into Python repositories, leaving almost no visible trace. The earliest confirmed infections date back to March 8, 2026, and the campaign is still active, with new repositories being hit each day. The attack targets a broad […]

The post ForceMemo Hijacks GitHub Accounts, Backdoors Hundreds of Python Repos via Force-Push appeared first on Cyber Security News.