35K Malicious Code Insertions in GitHub: Attack or Bug-Bounty Effort?

A hacker going by the handle “Pl0xP” cloned a large number of GitHub repositories and slightly changed the cloned repository names, in a typosquatting effort to impersonate legitimate projects — thus potentially infecting any software that imported the code, software experts said today.