GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Unknown attackers compromised Injective Labs' GitHub repo to publish npm package 1.20.21, which steals wallet private keys ...
After publicly touting pull request limits as a way to cut maintainer noise, GitHub is taking the same idea further with a new setting that lets repository admins restrict issue creation to ...
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results