222 GitHub Repositories Linked to Fake Go Package Malware OperationSecurity Affairs·Jul 10, 10:23 UTC · Jul 10, 2026Malware42
A Malicious VS Code Extension Just Breached GitHub 's Internal RepositoriesSecurity Affairs·May 20, 08:50 UTC · May 20, 2026Data breach57
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesCisco Talos·Apr 7, 10:00 UTC · Apr 7, 2026Malware55
Finding Lost Data with Threat Intelligence: Mitigating Data LeaksRecorded Future·Jan 12, 00:00 UTC · Jan 12, 2026Vulnerability30
GitHub abused to distribute payloads on behalf of malware-as-aArs Technica · Security·Jul 17, 22:16 UTC · Jul 17, 2025Malware42
Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting TopThe Hacker News·Mar 26, 03:55 UTC · Mar 26, 2024Malware142
Stolen OAuth tokens used to download data from dozens of orgs, GitHub warnsSecurity Affairs·Apr 17, 14:58 UTC · Apr 17, 2022Threat actor45
Building Password Purgatory with Cloudflare Pages and WorkersTroy Hunt·Mar 11, 02:00 UTC · Mar 11, 2022AI tools & infra130
Checkmarx provides automated security scans within GitHub repositoriesHelp Net Security·Oct 5, 00:00 UTC · Oct 5, 2020Vulnerability30
GitHub rolls out new token scanning, security alert featuresCyberScoop·Oct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild60
GitHub started warning users when adopting compromised credentialsSecurity Affairs·Aug 8, 16:04 UTC · Aug 8, 2018Data breach57
Code hosting service GitHub can now scan also for vulnerable Python codeSecurity Affairs·Jul 16, 13:40 UTC · Jul 16, 2018Vulnerability130
Github Account of Gentoo Linux Hacked, Code Replaced With MalwareThe Hacker News·Jul 4, 14:08 UTC · Jul 4, 2018Malware30
GitHub said leaked passwords were used to access its accountsSecurity Affairs·May 2, 07:00 UTC · May 2, 2018Data breach57
GitHub warns developers when their projects include vulnerable librariesSecurity Affairs·Nov 17, 18:53 UTC · Nov 17, 2017Vulnerability30
Microsoft is Shutting Down CodePlex, Asks Devs To Move To GitHubThe Hacker News·Apr 3, 10:12 UTC · Apr 3, 2017Industry130
GitHub Dependabot malware alerts now cover eight ecosystemsHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2026Malware30
Miasma Worm Compromises 73 Microsoft GitHub RepositoriesSecurity Affairs·Jun 9, 16:08 UTC · Jun 9, 2026Malware142
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News·Jun 6, 06:23 UTC · Jun 6, 2026Data breach57
GitHub says internal repositories were impacted in poisoned VS Code extension attackCyberScoop·May 20, 16:59 UTC · May 20, 2026Ransomware60
TeamPCP breached GitHub's internal codebase via poisoned VS Code extensionHelp Net Security·May 20, 00:00 UTC · May 20, 2026Data breach60
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More PackagesThe Hacker News·May 15, 00:00 UTC · May 15, 2026AI safety & securityCVE-2026-4532135
Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential TheftThe Hacker News·May 1, 09:43 UTC · May 1, 2026Data breach57
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain CampaignThe Hacker News·Apr 26, 07:45 UTC · Apr 26, 2026Threat actor57
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
Flying Under the Radar: Abusing GitHub for Malicious InfrastructureRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Threat actor157
Malware-as-a-Service Campaign Exploits GitHub to Deliver PayloadsInfosecurity Magazine·Jul 17, 16:00 UTC · Jul 17, 2025Malware30
GitHub project maintainers targeted with fake security alertHelp Net Security·Apr 2, 08:49 UTC · Apr 2, 2025Threat actor145
GitHub Action tj-actions/changed-files was compromised in supply chain attackSecurity Affairs·Mar 18, 10:17 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066147
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160
Google Cloud Platform Data Destruction via Cloud BuildCisco Talos·Feb 6, 11:00 UTC · Feb 6, 2025Vulnerability142
GitHub Secure Open Source Fund: Project maintainers, apply now!Help Net Security·Nov 20, 00:00 UTC · Nov 20, 2024Vulnerability130
GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious CodeThe Hacker News·Sep 9, 12:05 UTC · Sep 9, 2024Malware142
GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential TakeoverThe Hacker News·Aug 17, 06:28 UTC · Aug 17, 2024Vulnerability42
There is no real fix to the security issues recently found in GitHub and other similar softwareCisco Talos·Aug 1, 18:00 UTC · Aug 1, 2024RansomwareCVE-2018-082460
Network of ghost GitHub accounts successfully distributes malwareHelp Net Security·Jul 24, 00:00 UTC · Jul 24, 2024Malware30
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokensSecurity Affairs·Jun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-37051160
GitHub Rotates Credentials and Patches New BugInfosecurity Magazine·Jan 17, 09:30 UTC · Jan 17, 2024Vulnerability155
Threat Actors Increasingly Abusing GitHub for Malicious PurposesThe Hacker News·Jan 12, 04:20 UTC · Jan 12, 2024Threat actor45
WhiteSource now supports GitHub PackagesHelp Net Security·Dec 14, 12:02 UTC · Dec 14, 2023Vulnerability30