Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content (3 minute read)

2026-09-25

The placeholder domain third-party[.]com, referenced in over 1,700 GitHub repositories, has been registered and now serves malicious content. It delivers a ClickFix PowerShell lure to Windows users and scams to macOS users via yoursite[.]com and your-domain[.]com, which often evade static scans.