New Technique Detected in an Open Source Supply Chain Attack

Attackers create malicious GitHub repositories with popular names and topics, using techniques like automated updates and fake stars to boost search rankings and deceive users.