Tracked topic
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
… Get the whitepaper Related Articles: GitHub announces npm security changes to tackle supply-chain attacks AsyncAPI npm packages infected with credential-stealing malware GitHub disables Microsoft repos pushing password-stealing malware New Shai-Hulud attack trojanizes 19 science-focused PyPI packag… …
… However, if you check out the above-linked GitHub Your Code, On a CD offer page, it quickly becomes clear this is a very limited in time/scope stunt. “Order a burned CD of your own public GitHub repo. …
… "This functionality is achieved by github.com POSTing over an OAuth token to github.dev that allows it to interact with GitHub on your behalf," Askar said . …
… The hacker pivoted from Red Hat's npm packages to Microsoft's resources on GitHub. "The worm initially struck the @redhat-cloud-services npm namespace by compromising a Red Hat employee’s GitHub account. …
Hello folks.Like a lot of great software, we built OctoPunk out of frustration.We are a set of developers who, for one reason or another, have been using GitHub as our primary code forge for professional work for a very …
Hi everyone,I'm used to write (low-level) C and Win32 apps. Recently, I shared some of my open-source projects on Reddit. They got quite a bit of traction, resulting in a sudden spike of visitors and lot of unique Git cl…
submitted by /u/rkhunter_ to r/cybersecurity [link] [comments]
Show HN: Pyor - A better alternative to Github for reviewing PRssince the introduction of AI, the bottleneck for shipping code shifted from producing code to reviewing it, and the PR reviewing experience on Github is lac…
https://seaticket.ai/After maintaining Seafile, open-source file-sync software, since 2012. Somewhere across those fourteen years, "go check if someone already reported this" turned into one of the most common lines in o…
ArcticWolf uncovered 292 malicious GitHub repositories spoofing legitimate tools and products, delivering a new BoryptGrab infostealer variant Malware steals from 19 browsers, 32 crypto wallets, messaging apps, Steam, and Windows Credential Manager, and uniquely bypasses Chrome’s App‑Bound Encrypti… …
… To opt out, GitHub users should visit /settings/copilot/features and disable "Allow GitHub to use my data for AI model training" under the Privacy heading. Mario Rodriguez, GitHub's chief product officer, would rather you didn't. …
Clean GitHub repo tricks AI coding agents into running malware By Bill Toulas June 27, 2026 10:22 AM An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers. …
FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware By Bill Toulas July 21, 2026 06:34 PM A large-scale operation dubbed ‘FakeGit’ is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. …
… "We've now added the option so folks can upgrade from your GitHub Copilot Student plan to a paid GitHub Copilot Pro or GitHub Copilot Pro+ plan if you want to, while retaining the rest of your GitHub Student Pack benefits," he said in an update to his initial post. …
