pull down to refresh

GitHub besieged by millions of malicious repositories in ongoing attackarstechnica.com/security/2024/02/github-besieged-by-millions-of-malicious-repositories-in-ongoing-attack/
172 sats \ 1 comment \ @zarko 1 Mar 2024 security
related
Over 100,000 Infected Repos Found on GitHub
1697 sats \ 6 comments \ @0xbitcoiner 29 Feb 2024 security
GitHub suffers a cascading supply chain attack compromising CI/CD secretswww.infoworld.com/article/3849245/github-suffers-a-cascading-supply-chain-attack-compromising-ci-cd-secrets.html
389 sats \ 2 comments \ @ch0k1 21 Mar 2025 security
GitHub MCP Exploited: Accessing private repositories via MCPinvariantlabs.ai/blog/mcp-github-vulnerability
320 sats \ 0 comments \ @k00b 27 May 2025 tech
GitHub MCP exploited: Accessing private repositories via MCP | Hacker Newssimonwillison.net/2025/May/26/github-mcp-exploited/
286 sats \ 1 comment \ @ch0k1 30 May 2025 news
Claude Code's GitHub Actions Vulnerability Lets Attackers Compromise Any Repocybersecuritynews.com/claude-codes-github-actions-vulnerability/amp/
202 sats \ 1 comment \ @ch0k1 3 Jun security
The GitHub Actions Worm: Compromise GitHub Repos Through the Actions Dep Treewww.paloaltonetworks.com/blog/prisma-cloud/github-actions-worm-dependencies/
3820 sats \ 5 comments \ @k00b 17 Sep 2023 tech
CISA left a GitHub repo open with passwords, keys, tokenswww.theregister.com/security/2026/05/19/americas-top-cyber-defense-agency-left-a-github-repo-open-with-with-passwords-keys-tokens-and-incredibly-obvious-filenames/5242915
626 sats \ 3 comments \ @0xbitcoiner 19 May lol
Major Shai Hulud campaign strikes npm again, affecting keyv and 400+ packagesresearch.jfrog.com/post/shai-hulud-is-back-august/?mkt_tok=MjU2LUZOWi0xODcAAAGja_f-QPe1goa7WPtDHzCEXtHfPtK8iDfWRrcr4eetBQ8EnbqiScZay95WhRI4pmLOBpIg1wY5Qc6tX2W2zumzouH8GvhsCggwbwRa7yVUnn6yDCg#compromised-packages-ongoing
357 sats \ 0 comments \ @guerratotal 7 Aug security devs
Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositorieswww.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild
230 sats \ 1 comment \ @aljaz 16 Jan tech
Claude, Gemini CLI & Copilot Vulnerable to Prompt Injection via GitHub Commentscybersecuritynews.com/prompt-injection-via-github-comments/
398 sats \ 0 comments \ @Tony 21 Apr security AI
Agent that works on a forked version of a repo?
1748 sats \ 2 comments \ @justadvm 3 Nov 2024 openagents
Millions of GitHub Repos Likely Vulnerable to RepoJackingwww.nobsbitcoin.com/millions-of-github-repos-likely-vulnerable-to-repojacking/
345 sats \ 1 comment \ @AR0w 24 Jun 2023 tech
Saying Goodbye to GitHubersei.net/en/blog/bye-bye-github
2800 sats \ 12 comments \ @shadowymartian 3 Apr 2023 bitcoin
🧵 Widespread malware attack on GitHubnitter.it/stephenlacy/status/1554697077430505473
315 sats \ 14 comments \ @cryptocoin 3 Aug 2022 bitcoin
Radicle: the sovereign forge - decentralized git inspired by lightningradicle.dev/
743 sats \ 0 comments \ @Scoresby 18 May devs hyperlinks
Microsoft GitHub is under siege as security experts claim 100k vulnerable reposwww.windowscentral.com/microsoft/microsofts-github-is-under-siege-as-security-experts-claim-over-100000-github-repositories-are-infected
291 sats \ 2 comments \ @ch0k1 2 Mar 2024 bitcoin
FYI GitHub organization owners can see contributor's country and even IP
19k sats \ 17 comments \ @m0wer 4 Aug tech
grasp: a simple protocol for decentralized gitgitgrasp.com/
558 sats \ 0 comments \ @i_am_a_seeker 14 Jun tech nostr devs
Should I "Give Up Github"?
252 sats \ 15 comments \ @adlai 29 Aug 2025 devs
GRASP • Git Repositories Authorized via Signed-Nostr Proofsngit.dev/grasp/#why
689 sats \ 0 comments \ @Scoresby 6 Nov 2025 nostr
Anyone can access deleted and private repository data on GitHubtrufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github
331 sats \ 0 comments \ @hn 24 Jul 2024 tech