GitHub

Search everything

Mentions · 7d11
Mentions · 30d71
All mentions137
First seenAug 13, 2026
Last mentioned18h ago

Timeline

137 articles · newest first

GitHub mitigates Actions, Pages and Webhooks degradation

Root-cause investigation continues after errors also hit code search and live updates.

Hacker News · AIOct 30, 17:57 UTC · 18h agoIndustry HN 48 points · 20 comments1

Hugging Face crypto-mining models return; a copy stays live

Pluto found 31 repositories posing as Qwen2 checkpoints; the flagship reached 28,412 downloads and a copy remained online.

BleepingComputerOct 29, 22:09 UTC · 1d agoMalware2 · 1 read

GhostAction GitHub campaign slows after hitting tens of thousands of repos

GitGuardian says the operator pushed 72,000 commits to 23,000 public repositories from October 13 to 21.

Dark ReadingOct 28, 19:39 UTC · 2d agoThreat actor 7 sources2

GitHub Octoverse 2026 cites tripled pull requests and commits

GitHub says monthly merged pull requests reached 220 million and commits 7.38 billion, linking the jump to agentic engineering.

Simon WillisonOct 28, 16:45 UTC · 2d agoAI industry1 · 1 read

samtools through 1.24 fixed in 1.25 and backports

Fixes were also back-ported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3; CVE numbers are not assigned yet.

oss-securityOct 27, 21:14 UTC · 3d agoVulnerability 2 sources1

HTSlib through 1.24 fixed in 1.25 and backports

The same release set back-ports fixes to 1.24.1, 1.23.3, 1.22.4 and 1.21.3 while CVE IDs remain pending.

oss-securityOct 27, 21:12 UTC · 3d agoVulnerability 2 sources1

Scanner finds local and composite vulnerabilities in public agent skills

Analysts confirmed 53 of 59 GitHub findings, and mitigations blocked attacks in 47 of 55 tested cases.

arXiv cs.CROct 27, 19:43 UTC · 3d agoAI safety & security

GitHub Universe badge runs a Game Boy Color emulator

Steve Francia used Gemini to put NES and Game Boy emulators on the color-screen conference badge.

Simon WillisonOct 27, 19:34 UTC · 3d agoOther

Study maps OpenClaw agent security failures across Reddit and GitHub

Across 162 Reddit posts and 180 GitHub issues, 521 weakness instances cluster in access control, exposure, injection, and unsafe execution.

arXiv cs.CROct 26, 13:49 UTC · 4d agoAI safety & security3

Hacker News links to Steal My Bitcoin CTF PoC

The available feed text gives only the title plus 44 points and 7 comments.

Hacker News · AIOct 26, 00:15 UTC · 5d agoExploit / PoC HN 44 points · 7 comments1 · 1 read

Roku moves developer repositories from GitHub to GitLab

Docs, samples, RSG 2.0 SDK software, and tooling now use the same names under gitlab.com/rokudev.

Hacker News · AIOct 24, 16:06 UTC · 6d agoOther HN 50 points · 16 comments1 · 1 read

Leaked LiteLLM master key used to steal GitHub tokens and publish malicious 1.107.0

An unrevoked Agent Platform key from May let an attacker publish LiteLLM 1.107.0 to PyPI on October 21; PyPI later quarantined it.

The Hacker NewsOct 24, 11:03 UTC · 7d agoData breach4 · 1 read

Malicious LiteLLM 1.107.0 published after suspected token leak

Unpinned installs for a few hours on October 21 pulled a credential stealer and an hourly remote-code backdoor.

The Hacker NewsOct 22, 08:28 UTC · 9d agoMalware3 · 2 reads

OVHcloud GitHub account used to ship malicious CLI binaries

Poisoned ovhcloud-cli releases were online for 1 hour 33 minutes and downloaded about 250 times.

Dark ReadingOct 21, 16:50 UTC · 9d agoData breach2 · 1 read

GitHub puts nearly all repositories in Azure amid agent traffic

Per-reference quorums target the last 0.00001% of repos; tests saw 3–4x write throughput.

Hacker News · AIOct 21, 16:09 UTC · 9d agoAI industry HN 40 points · 9 comments2 · 1 read

Info-stealer slipped into OVHcloud CLI GitHub releases

Tampered builds v0.11.0 through v0.15.0 were live for under two hours on October 19; v0.16.0 is clean.

Help Net SecurityOct 21, 08:59 UTC · 10d agoMalware1

Malicious LiteLLM 1.107.0 published with a credential stealer

PyPI and official Docker tags carried the release for about two hours; the RAT dead-drop never delivered a live second stage.

Datadog Security LabsOct 21, 00:00 UTC · 10d agoMalware

OVHcloud CLI releases 0.11.0–0.15.0 backdoored on GitHub to steal secrets

A hijacked GitHub account pushed trojanized binaries for about 90 minutes on October 19; 0.10.0 and 0.16.0 are clean.

BleepingComputerOct 20, 11:31 UTC · 11d agoMalware1 · 1 read

Guide stores macOS SSH keys in the Secure Enclave with Touch ID

Non-extractable p-256-ne identities die with the Mac and must be re-registered, including on GitHub.

Lobsters · securityOct 20, 10:23 UTC · 11d agoResearch2 · 2 reads

Hijacked account swapped five OVHcloud CLI releases with a secret-stealer

The swapped archives were live for up to 94 minutes on October 19 and only reached unhashed installs on selected platforms.

The Hacker NewsOct 20, 08:21 UTC · 11d agoMalware1 · 1 read

AI Can Write the Code. Who Verifies It?

A Faros study and tooling survey say AI coding raises bugs and incidents unless automated verification keeps pace.

Hacker News · securityOct 17, 18:31 UTC · 13d agoAI tools & infra HN 24 points · 42 comments20 · 4 reads

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Malicious npm package imgdecode, tied to MALFEX, loads a DLL that downloads and injects shellcode.

The Hacker NewsOct 17, 11:11 UTC · 14d agoMalwareExploited5

OSSScope builds a code-clone feature set from 190K C repos

The selected set holds 61 million fingerprinting functions and is reported to improve recall 22.65% over prior tools.

arXiv cs.CROct 17, 05:51 UTC · 14d agoResearch1 · 1 read

New Aoki Infostealer Targets AI Coding Assistant Credentials

Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.

Infosecurity MagazineOct 15, 13:00 UTC · 15d agoMalwareExploited12 · 2 reads

10 Best Secrets Detection Tools Compared (2026): Features & Pricing

A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.

GBHackersOct 15, 07:04 UTC · 16d agoTools7 · 3 reads

Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]

A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.

Cyber Security NewsOct 15, 07:02 UTC · 16d agoIndustry9 · 3 reads

AI-generated changes create review bottlenecks in software delivery

JetBrains finds most DevOps teams run CI/CD, while AI-generated changes slow code reviews.

Help Net SecurityOct 15, 04:30 UTC · 16d agoIndustry4 · 1 read

ASPM in the AI Era Part 1: Unified Visibility Across Your Stack

Wiz promotes ASPM connectors that centralize scanner findings and prioritize exploitable application risks.

Wiz BlogOct 14, 20:13 UTC · 16d agoIndustryCVE-2025-551825 · 1 read

GitHub’s model for secret detection: Finding more secrets with less noise

GitHub's ModernBERT secret classifier raised alert acceptance 11.5% and cut median scan time by 86%.

GitHub Blog · SecurityOct 13, 17:56 UTC · 17d agoTools3 · 1 read

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

GitHub expires unused npm trusted-publisher configs after 48 hours following a slug-reuse flaw affecting 1,500-plus packages.

The Hacker NewsOct 13, 16:18 UTC · 17d agoVulnerability8 · 3 reads

All Systems Go: Global PC App Ecosystem Ready for NVIDIA RTX Spark

NVIDIA prepares RTX Spark PCs for an Oct. 16 launch with local AI agents and Nemotron 3.5 Bolt 74B.

NVIDIA BlogOct 13, 12:00 UTC · 18d agoAI industry9 · 3 reads

Over 1,500 npm packages exposed by Trusted Publishing validation flaw

A now-fixed npm Trusted Publishing flaw exposed over 1,500 packages to repository-name hijacks.

CSO OnlineOct 13, 10:02 UTC · 18d agoVulnerability4

Incident with Actions, Pull Requests and Issues

GitHub mitigated degraded Actions, Issues, and Pull Requests, with notification delays still being fixed.

Hacker News · AIOct 12, 12:23 UTC · 19d agoOther HN 45 points · 30 comments4 · 1 read

Python 3.15.0 added to actions/python-versions

Python 3.15.0 is now available in GitHub Actions python-versions for CI test matrices.

Simon WillisonOct 10, 23:58 UTC · 20d agoOther2 · 1 read

GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API Credentials

GhostAction compromised 500-plus GitHub accounts and planted workflows that steal cloud and AI API credentials.

GBHackersOct 10, 09:02 UTC · 21d agoThreat actorExploited7 · 4 reads

New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets

GhostAction hit 346 GitHub repositories, including Uber's, with malicious Actions workflows that stole CI secrets.

Cyber Security NewsOct 9, 16:38 UTC · 21d agoThreat actorExploited7 · 5 reads

Vulnerable Models in the AI Supply Chain: An Empirical Study of Adoption, Propagation, and Usage Patterns

A study finds 3,757 flagged vulnerable Hugging Face models referenced across more than 5,000 repositories without sanitization.

arXiv cs.CROct 9, 02:27 UTC · 22d agoAI safety & security2 · 1 read

FakeGit malware campaign returns with 17,610 malicious GitHub repos

FakeGit returned with 17,610 GitHub repositories distributing SmartLoader and the StealC infostealer.

BleepingComputerOct 8, 17:10 UTC · 22d agoMalwareExploited3

How one bug bounty researcher chooses the features they investigate

GitHub profiles VIP bug bounty researcher @vaib25vicky and higher payouts for quality findings.

GitHub Blog · SecurityOct 8, 17:02 UTC · 22d agoIndustry8 · 3 reads

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Malicious tensorlake@0.5.144 on npm delivers a Shai-Hulud worm that steals developer secrets and can wipe hosts.

Cyber Security NewsOct 8, 15:50 UTC · 22d agoMalwareExploited9 · 6 reads

Related CVEs

by mentions

CVE-2025-55182100%10.0
Unauthenticated RCE in React Server Components (React2Shell)
published Dec 3, 2025Meta (Facebook) React Server Components (react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack)KEVRansomwarePoC ×13
CVE-2026-453213%9.6
Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages
published May 12, 2026tanstack @tanstack/arktype-adapterKEVRansomwarePoC ×2
CVE-2026-4227191%8.7
Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
published May 8, 2026BerriAI LiteLLM (proxy server / AI Gateway)KEV
CVE-2026-85061<1%10.0
Sanitization Bypass (DOM XSS) in MapLibre GL JS Attribution Control
published Sep 3, 2026MapLibre GL JS (npm: maplibre-gl)
CVE-2025-5953626%8.7
Code Injection in Anthropic Claude Code Startup Trust Dialog (pre-1.0.111)
published Oct 3, 2025Anthropic Claude Code
CVE-2024-53920<1%7.8
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can…
published Nov 27, 2024gnu emacs
CVE-2026-2185225%5.3
API Key Exfiltration via Attacker-Controlled Base URL in Anthropic Claude Code
published Jan 21, 2026anthropic claude code

Appears with

GitHubvendor · 49
GitHub Actionsproduct · 18
GitHubproduct · 15
GitHub Copilotproduct · 15
npmproduct · 14
Microsoftvendor · 14
Microsoftorganization · 10
GitGuardianorganization · 8
Anthropicvendor · 8
OpenAIorganization · 7
Googlevendor · 7
OpenAIvendor · 7
Snykvendor · 6
litellmproduct · 6
Socketorganization · 6
Claude Codeproduct · 6

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned 18h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.