GITHUB 19
- GitHub Ends Automatic Install Script Execution for npm
- npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
- Megalodon Chums the Waters in 5.5K+ GitHub Repo Poisonings
- EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
- GitHub Rushed to Fix a Critical Vulnerability in Less Than Six Hours
- GitHub - Katana A Next-Generation Crawling and Spidering Framework
- GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
- RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
- Go Library Maintainer Critiques GitHub's Dependabot as a 'Noise Machine'
- RoguePilot - Exploiting GitHub Copilot for a Repository Takeover
- Red Hat confirms security incident after hackers claim GitHub breach
- GhostAction Supply Chain Attack Compromises 3000+ Secrets
- Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
- Ransomware Delivered Through GitHub A PowerShell-Powered Attack
- GitHub Abused to Spread Malware Disguised as Free VPN
- Threat actor Banana Squad exploits GitHub repos in new campaign
- Fake Minecraft mods distributed by the Stargazers Ghost Network to steal gamers’ data
- Clone, Compile, Compromise Water Curse’s Open-Source Malware Trap on GitHub
- GitHub Device Code Phishing