Tracked topic
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
…It may advertise GitHub access, private repositories, source code, API keys, OAuth tokens, cloud credentials, CI/CD data, or a vendor-related leak. The supply-chain risk comes from where that access…
…When GitHub credentials are available, the malware uses the GitHub API to automatically create new repositories under the victim’s account and upload the stolen data to them. Socket has found 1…
…Checkmarx says that its GitHub repositories are isolated from its customer production environment, and no customer data is stored in the GitHub repository. "We have communicated with our customers throughout this process…
…Because the packages were built and published through their legitimate GitHub Actions workflows, the compromised npm releases carried valid provenance information. The poisoned packages contain two files: the setup.mjs payload dropper…
Injective SDK on npm infected with cryptocurrency wallet stealer By Bill Toulas July 9, 2026 04:10 PM Hackers compromised the Injective Labs SDK project's GitHub repository and used it to…
…The Shai-Hulud campaign emerged last September and had multiple iterations [ 1 , 2 , 3 ], some of them exposing hundreds of thousands of developer secrets in automatically generated GitHub repositories. Among more recently…
…On Monday, Microsoft resolved another incident that brought down GitHub , its website, the API, and many other services for more than eight hours, with users reporting server errors when trying to access…
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer…
Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid AI detection evasion…
…The attempted destructive action extended from wiping GitHub repositories to pushing an empty package that could have damaged users' systems. OpenMandriva is an independent, community-run Linux distribution, forked from Mandriva Linux…