Worm armed 42 GitHub repos by hiding a payload too big to fail

A worm armed 42 GitHub repositories by hiding its payload in blobs measuring 12.9 to 13.7 MB, The Register reports. The oversized payload blobs were large enough to evade GitHub’s code search, keeping the malicious code out of normal discovery.