Mini Shai-Hulud Hits Hundreds of npm Packages in AntV EcosystemInfosecurity Magazine·May 20, 15:00 UTC · May 20, 2026Data breach57
Mini Shai-Hulud returns, compromising hundreds of npm packagesCyberScoop·May 19, 21:21 UTC · May 19, 2026Data breach in the wild60
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD CredentialsThe Hacker News·May 19, 09:12 UTC · May 19, 2026Data breach57
Attackers Hijack Red Hat npm Scope to Steal Cloud SecretsInfosecurity Magazine·Jun 2, 10:00 UTC · Jun 2, 2026Data breach57
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesThe Hacker News·Jun 10, 04:50 UTC · Jun 10, 2026Data breach157
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code ExtensionInfosecurity Magazine·May 21, 14:45 UTC · May 21, 2026Data breachCVE-2026-48027160
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
A Malicious VS Code Extension Just Breached GitHub 's Internal RepositoriesSecurity Affairs·May 20, 08:50 UTC · May 20, 2026Data breach57
TeamPCP breached GitHub's internal codebase via poisoned VS Code extensionHelp Net Security·May 20, 00:00 UTC · May 20, 2026Data breach60