Leaked n8n API Tokens Exposed Live Instances to Credential TheftThe Hacker News·Aug 5, 10:35 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2025-6861360
GitHub lays out copyright liability changes and upcoming DMCA review for developersHelp Net Security·Jul 23, 07:01 UTC · Jul 23, 2026Policy & legal130
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate OrgsThe Hacker News·Jul 10, 06:30 UTC · Jul 10, 2026Threat actor57
Serverless Phishing Kit on GitHub Targets Mexican BanksInfosecurity Magazine·Jun 17, 14:00 UTC · Jun 17, 2026Phishing & fraud30
GitHub releases an open dataset for multilingual developer contentHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2026AI research130
Malicious npm Package Stole Files From Claude AI User Directory via GitHubThe Hacker News·May 27, 15:44 UTC · May 27, 2026Malware42
Fake ChatGPT and Claude installers on GitHub are dropping Deno RAT malwareHelp Net Security·May 27, 00:00 UTC · May 27, 2026Malware42
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Malware Persistence via Telegram and GitHubSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Malware55
Magento Developers Impersonated in Targeted GitHub Malware OperationSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware55
DPRK-Linked Hackers Use GitHub as C2 in MultiThe Hacker News·Apr 9, 04:56 UTC · Apr 9, 2026Malware142
Phishers sneak through using GitHub and Jira’s own mail delivery infrastructureHelp Net Security·Apr 9, 00:00 UTC · Apr 9, 2026Vulnerability30
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes WiperThe Hacker News·Mar 25, 14:32 UTC · Mar 25, 2026MalwareCVE-2026-33634160
Astaroth Banking Trojan Abuses GitHub to Remain Operational After TakedownsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Malware30
GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain SecurityThe Hacker News·Sep 25, 07:40 UTC · Sep 25, 2025Malware42
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Data breach157
Malicious GitHub pages lure MacOS users into installing Atomic infostealerHelp Net Security·Sep 22, 00:00 UTC · Sep 22, 2025Malware30
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHubThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133CVE-2024-5555660
GitPhish: Open-source GitHub device code flow security assessment toolHelp Net Security·Jul 3, 00:00 UTC · Jul 3, 2025Phishing & fraud30
SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain AttackThe Hacker News·Apr 7, 06:38 UTC · Apr 7, 2025Vulnerability42
Hundreds of GitHub repos served up malware for yearsHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2025Malware42
GitHub patches critical vulnerability in its Enterprise ServersCyberScoop·Oct 16, 20:24 UTC · Oct 16, 2024VulnerabilityCVE-2024-9487CVE-2024-4985CVE-2024-9539160
Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)Help Net Security·Aug 22, 00:00 UTC · Aug 22, 2024VulnerabilityCVE-2024-680060
“gitgub” campaign targets Github users with RisePro infoSecurity Affairs·Mar 17, 15:01 UTC · Mar 17, 2024Threat actor45
Nearly 13 Million Secrets Spilled Via Public GitHub RepositoriesInfosecurity Magazine·Mar 13, 09:30 UTC · Mar 13, 2024Threat actor45
GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot ContributionsThe Hacker News·Sep 29, 02:43 UTC · Sep 29, 2023Vulnerability142
Pro-Russia hackers use Telegram, GitHub to attack Czech presidential electionThe Record·Feb 3, 00:00 UTC · Feb 3, 2023Policy & legal30
GitHub incident allowed attacker to copy Okta\'s source codeThe Record·Feb 2, 00:00 UTC · Feb 2, 2023Ransomware257
GitHub Announces Free Secret Scanning for All Public RepositoriesThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2022Phishing & fraud55
GitHub fixed serious npm registry vulnerability, will mandate 2FA use for certain accountsHelp Net Security·Nov 17, 00:00 UTC · Nov 17, 2021Vulnerability30
GitHub addressed two major vulnerabilities in the NPM package managerSecurity Affairs·Nov 16, 22:23 UTC · Nov 16, 2021Vulnerability30
Allstar app helps enforce security best practices for GitHub projectsHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2021Vulnerability30
GitHub removes researcher's Exchange Server exploit, sparking industry debateCyberScoop·Mar 11, 21:25 UTC · Mar 11, 2021Exploit / PoC in the wild60
ShiftLeft NG SAST now available on GitHub MarketplaceHelp Net Security·Sep 10, 00:00 UTC · Sep 10, 2020Policy & legal30
GitHub hit with record 1.35-Tbps denial of service attack, more attacks expectedCyberScoop·Mar 1, 19:17 UTC · Mar 1, 2018Exploit / PoC in the wild160
NSA opens the NSA Github Account that already lists 32 ProjectsSecurity Affairs·Jun 21, 13:40 UTC · Jun 21, 2017Industry130
GeekedIn service exposed 8 million GitHub profiles onlineSecurity Affairs·Nov 19, 11:09 UTC · Nov 19, 2016Data breach157
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for ItselfThe Hacker News·Aug 5, 07:53 UTC · Aug 5, 2026Malware55
AI developers targeted via trojanized GitHub repositoriesHelp Net Security·Aug 4, 00:00 UTC · Aug 4, 2026Malware130