Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

An ongoing malware campaign uses SEO-optimized GitHub repositories impersonating well-known software firms to push a previously undocumented information stealer called Rapuncel. The malicious repos are designed to trick users into downloading the infostealer, which can exfiltrate sensitive data. Users are advised to verify repository authenticity before downloading any software.