Taking advantage of this, hackers co-opted a third-party Windows 11 ToolBox script to distribute malware.

On the surface, the app works as advertised and helps add the Google Play Store to Windows 11.

But since the script worked as advertised, no one noticed something was amiss.

Computer bug on a blue network circuit

mustafahacalaki / Getty Images

Fattah also pointed out that the projects use of a Powershell script was the first sign that spooked him.

“We need to be very cautious of running any Powershell scripts from the internet.

Hackers have and will continue to leverage Powershell to distribute malware,” warned Fattah.

closeup laptop hacker hands

Bill Hinton / Getty Images

“Security is a shared responsibility as described on GitHubs own security approach,” pointed out Cundiff.