Malware found in Google Code

Google's free code-hosting Web site for developers is being used to distribute malware, accordin to a security researcher.

Google Code is a place where programmers can host projects and code. Along with the legitimate code are links to fake videos that direct users to download a missing codec.The codecs turn out instead to be password-stealing Trojan horses and programs geared toward stealing financial information for identity fraud, he said.

A Google spokesman said the company has removed malware-distributing projects from Google Code and search results.

The problem is similar to one that was found to be plaguing Microsoft's MSN Spaces site a year ago and continues to occur there, according to a McAfee Avert Labs blog posting.