GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos The Hacker News

Early report Major update Updated Mar 16, 2026, 7:37 PM UTC

Track this event Edit in app More event pages

What changed

Early report surfaced from Auto search: attack 5h ago.

First seen Mar 16, 2026, 7:37 PM UTC Latest source Mar 16, 2026, 7:37 PM UTC

Update 1 5h ago

Auto search: attack •published Mar 16, 2026, 7:37 PM UTC •fetched Mar 16, 2026, 11:41 PM UTC