GitVenom is a malware campaign targeting GitHub users, posing as open-source projects.Threat actors created fake GitHub repositories with malicious code, disguised as automation tools and crypto bots.Malicious payloads were stored in the fake projects to download further components and execute them.The campaign targeted gamers and crypto investors with a variety of malicious activities including stealing credentials and cryptocurrency hijacking.