Hi all,

I propose we publish the following on the Apache NetBeans blog re the
recent announcement by GitHub researchers of malware found in some NetBeans
generated projects on GitHub.

Title: Malware Found in 26 NetBeans Ant Projects on GitHub

Content:

"Researchers at GitHub have identified 26 projects on GitHub that have been
infected by malware. The malware infiltrates the project structure of
Ant-based applications in the format generated specifically by NetBeans.
The owners of the 26 projects, which are mostly small Java applications,
have been contacted and the infected projects have been set to private on
GitHub. The malware campaign is no longer active, GitHub did not consider
it relevant enough to be in touch with the NetBeans community about it, and
there is no evidence that applications beyond the 26 in question have been
impacted. Be aware that any project structure that you use when developing
applications can be infiltrated by malware and make sure that the files you
check into your versioning system are your own or that you know where they
come from and what they do."


Feedback welcome and needed.

Gj

Reply via email to