Tracked topic
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
…GitHub announces npm security changes to tackle supply-chain attacks GitHub disables Microsoft repos pushing password-stealing malware New IronWorm malware hits 36 packages in npm supply-chain attack Red Hat npm…
…Zimperium created a GitHub repository with all 137 commands available to Rokarolla. Some of the data-theft commands include: Steal SMS messages Extract contact information and WhatsApp contacts Capture keystrokes Record on…
…McAfee explains that many of those projects do not have official websites, only GitHub pages. In one case highlighted in the report, the malicious website displays a security notice warning visitors that…
…McAfee explains that many of those projects do not have official websites, only GitHub pages. In one case highlighted in the report, the malicious website displays a security notice warning visitors that…
…How to Spot it Before it Empties Your Wallet Ukraine identifies infostealer operator tied to 28,000 stolen accounts GitHub investigates internal repositories breach claimed by TeamPCP Microsoft blames macOS update for…
…The researcher shared a proof-of-concept exploit on Tuesday afternoon in a self-hosted Git repository after saying that GitHub and GitLab repositories hosting their exploits had previously been removed by…
…It targets browser and Electron application data, Slack, Microsoft Teams, Discord, GitHub, npm, Vault, Docker/Podman, SSH, VPN material, shell histories, and other local developer secrets," Whanos says in the report . With…
…They enumerated up to 60 installed extensions and collected identifiers from CI and cloud development environments, including GitHub, GitLab, Azure DevOps, Buildkite, CircleCI, GitHub Codespaces, and Gitpod. What is unusual about this…
…of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. Xcode is the official software development kit (SDK) for creating, testing, and publishing software for…
…According to the GitHub advisory, the flaw can be combined with the SQL injection issue to achieve remote code execution. The second vulnerability, CVE-2026-60137 , is an SQL injection flaw in…