In a blog post in March, GitHub said that within a month of its launch last year, developers acted on security alerts and removed 450,000 vulnerabilities from their projects.

GitHub did not publish the name of the 26 poisoned projects, but has published details about Octopus Scanner's infection process, so NetBeans users and Java developers can look for signs if their ...