Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
GitHub releases npm 12 with install scripts off by default and begins phasing out 2FA bypass tokens for sensitive npm actions ...
GitHub Copilot VS Code browser tools are now generally available and enabled by default for all paid Copilot subscribers. The ...
GitHub also launches Codex as an agent provider in JetBrains IDEs and rolls out AI credit pools giving enterprise admins ...
AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...
According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
Cybersecurity firm Novee has identified a GitHub Actions workflow-chain risk that can expose secrets even when checks pass, ...
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, ...
Researchers warn malicious GitHub repositories can trick AI coding agents into running hidden malware through trusted setup steps, risking developer systems and credentials. Google - Gemini A newly ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results