Reported by 3 outlets
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer https:// bleepingcomputer.com/news/security/ fake-lastpass-authentica
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.50 / 2.0 · updates in 48h
- Pickup speed
- 0.19 / 0.6 · time to second source
- Recency
- × 0.36 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 1.6 / 10 = base × recency + community
Analysis
A malware campaign distributes a previously undocumented infostealer named Rapuncel through SEO-optimized fake GitHub repositories impersonating LastPass and at least 39 other brands. The repositories deliver a Microsoft-signed kernel driver (Alinubx.sys, disguised as nvfsflt64.sys) that acts as an EDR killer with a hardcoded list of 145 antivirus and endpoint products to terminate. Victims receive ZIP archives inflated to 148MB that contain a renamed legitimate Visual Studio debugger sideloading a malicious DLL. LastPass and Delphos Labs uncovered the operation. The campaign combines supply-chain deception via GitHub with kernel-level endpoint disablement, making it especially dangerous for developers and security-conscious users.
Timeline
-
update from bleepingcomputer.com
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
bleepingcomputer.com · 25d ago · September 18th, 2026
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. LastPass and Delphos Labs uncovered the campaign, which they report impersonates the password manager brand and at least 39 other companies. Alongside the Rapuncel infostealer, the repositories deliver a Microsoft-signed kernel driver that can disable 145 antivirus and endpoint detection and response (EDR) products. The attack chain begins when victims search for LastPass Authenticator or other popular software and follow links to fake GitHub repos. There, clicking download buttons triggers a series of redirections before reaching payload-delivery servers, where victims receive ZIP archives with their size inflated to up to 148MB to evade security scans. The installer inside the archives is a copy of the legitimate Microsoft Visual Studio CoreCLR Debugger, 'vsdbg.exe,' renamed and configured to sideload a malicious DLL (vsdbg.dll). The installer deploys the Rapuncel infostealer as well as the Alinubx.sys kernel driver, which is used to kill antivirus software. Malicious GitHub page Source: LastPass The kernel driver is disguised as an NVIDIA component named 'nvfsflt64.sys' and registers as the NvFsFilter service. According to the researchers, the driver acts as an EDR killer that contains a hardcoded list of 145 antivirus and EDR processes that it aims to terminate. "The driver calls ObOpenObjectByPo
-
update from www.heise.de
LastPass discovers new infostealer variant disguised as GitHub repo Fake GitHub repositories are used to lure victims into downloading. An i
www.heise.de · 24d ago · September 19th, 2026
LastPass discovers new infostealer variant disguised as GitHub repo Fake GitHub repositories are used to lure victims into downloading. An i
via Mastodon https://www.heise.de/en/news/LastPass-discovers-new-infostealer-variant-disguised-as-GitHub-repo-11459182.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
-
mentioned by www.bleepingcomputer.com
Fake # LastPass Authenticator # GitHub repos push new # Rapuncel # infostealer https://www. bleepingcomputer.com/news/secu rity/fake-lastpas
www.bleepingcomputer.com · 24d ago · September 19th, 2026
-
mentioned by www.bleepingcomputer.com
Cybercriminals are using fake GitHub repositories to distribute a new information stealer called # Rapuncel . The campaign impersonates Last
www.bleepingcomputer.com · 20d ago · September 23rd, 2026
-
update from www.manifold.security
Cloning a hostile repo does nothing. Opening an unzipped one, .git intact, in a coding agent can run attacker code. GitSpawn: agents call gi
www.manifold.security · 4d ago · October 9th, 2026
Cloning a hostile repo does nothing. Opening an unzipped one, .git intact, in a coding agent can run attacker code. GitSpawn: agents call gi
via Mastodon https://www.manifold.security/blog/ai-coding-agents-git-hijack
-
update from www.manifold.security
A repo shared as a .zip with its .git folder included can run code the moment your coding agent calls git status. GitSpawn: .git/config sets
www.manifold.security · 1d ago · October 12th, 2026
A repo shared as a .zip with its .git folder included can run code the moment your coding agent calls git status.