Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...
Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...
A repository containing scripts that have been created to leverage the toolkit found within the CCDC portfolio that are accessible via the CSD Python API. The purpose of this platform is to distribute ...
The newrelic package instruments your application for performance monitoring and advanced performance analytics with New Relic. Pinpoint and solve Python application performance issues down to the ...
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Research shows signed Git commits can be re-encoded into fresh GitHub Verified hashes without changing files or breaking ...
The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...
Cybersecurity firm Novee has identified a GitHub Actions workflow-chain risk that can expose secrets even when checks pass, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results