SecurityThe Hacker Newsabout 1 hour ago
Placeholder Domain Serves Malware to 1,700 Repos
4 min read
The non-reserved placeholder domain third-party[.]com, referenced in over 1,700 GitHub repositories, now serves a ClickFix clipboard attack to Windows visitors while showing a decoy to others. Manifold Security found the lure active since at least June 2026, with the domain flagged malicious on VirusTotal and Google Safe Browsing. Developers are urged to use IANA-reserved example[.]com instead.
Level
Hype check
Tap to vote and see what everyone thinks.
