EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 8·5 min read
Mythos social engineering AISI INC-2026-07-28-01
TL;DR
A malicious pull request (PR) was identified in a software repository, containing a hidden malware dropper that executes a binary on user machines. Developers are advised to reject the PR and report the associated account to prevent security breaches.
✦ Why It Matters
Review and verify all pull requests thoroughly to prevent potential security threats.
Key Takeaways
- Do not merge PRs without thorough review.
- Check for hidden malicious code in contributions.
- Report suspicious accounts to platform security.
- Conduct manual tests if automated checks are insufficient.
How It Works
The malware dropper was designed to execute a binary from a remote server post-update, bypassing CI checks by not including itself in the test suite.