8 million GitHub profiles were leaked from GeekedIn's MongoDBTroy Hunt·Nov 17, 19:50 UTC · Nov 17, 2016Data breach57
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM ServersThe Hacker News·Jul 23, 11:28 UTC · Jul 23, 2026Data breachCVE-2026-41940160
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD SecretsThe Hacker News·Mar 24, 06:31 UTC · Mar 24, 2026Data breach57
GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and AtomThe Hacker News·Feb 7, 06:10 UTC · Feb 7, 2023Data breach145
GlassWorm Attack Uses Stolen GitHub Tokens to ForceThe Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Data breach57
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code ExtensionInfosecurity Magazine·May 21, 14:45 UTC · May 21, 2026Data breachCVE-2026-48027160
Veza integrates with GitHub to secure customers’ dataHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2023Data breach160
Dropbox discloses unauthorized access to 130 GitHub repositoriesSecurity Affairs·Nov 2, 10:31 UTC · Nov 2, 2022Data breach45
A Malicious VS Code Extension Just Breached GitHub 's Internal RepositoriesSecurity Affairs·May 20, 08:50 UTC · May 20, 2026Data breach57
GitHub started warning users when adopting compromised credentialsSecurity Affairs·Aug 8, 16:04 UTC · Aug 8, 2018Data breach57
GitHub said leaked passwords were used to access its accountsSecurity Affairs·May 2, 07:00 UTC · May 2, 2018Data breach57
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News·Jun 6, 06:23 UTC · Jun 6, 2026Data breach57
TeamPCP breached GitHub's internal codebase via poisoned VS Code extensionHelp Net Security·May 20, 00:00 UTC · May 20, 2026Data breach60
Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential TheftThe Hacker News·May 1, 09:43 UTC · May 1, 2026Data breach57
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI CredentialsThe Hacker News·Mar 25, 06:34 UTC · Mar 25, 2026Data breachCVE-2026-3363460
Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attackHelp Net Security·Sep 16, 00:00 UTC · Sep 16, 2025Data breach57
Checkmarx supply chain attack impacts Bitwarden npm distribution pathSecurity Affairs·Apr 25, 21:59 UTC · Apr 25, 2026Data breach57
Handling people's personal data is sensitive businessTroy Hunt·Nov 22, 10:50 UTC · Nov 22, 2016Data breach57
GitHub Internal Repositories Breached via Malicious Nx Console VS Code ExtensionThe Hacker News·May 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321CVE-2026-4802760
Never leak secrets to your GitHub repositories againHelp Net Security·Mar 4, 13:09 UTC · Mar 4, 2024Data breach57
Non-Human Access is the Path of Least Resistance: A 2023 RecapThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Data breach57
Dropbox Suffers Breach, 130 GitHub Repositories CompromisedInfosecurity Magazine·Nov 2, 15:00 UTC · Nov 2, 2022Data breach157
GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access TokensThe Hacker News·May 28, 08:22 UTC · May 28, 2022Data breach45
Hackers compromised a Canonical GitHub account, Ubuntu source code was not impactedSecurity Affairs·Jul 7, 13:42 UTC · Jul 7, 2019Data breach145
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Data breach157
GeekedIn service exposed 8 million GitHub profiles onlineSecurity Affairs·Nov 19, 11:09 UTC · Nov 19, 2016Data breach57
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD CredentialsThe Hacker News·May 19, 09:12 UTC · May 19, 2026Data breach57
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer SecretsThe Hacker News·Mar 11, 12:57 UTC · Mar 11, 2026Data breachCVE-2026-2835360
GitHub push protection now on by default for public repositoriesHelp Net Security·Mar 4, 00:00 UTC · Mar 4, 2024Data breach157
Massive GitHub analysis reveals 10 million secrets hidden in 1 billion commitsHelp Net Security·Mar 9, 00:00 UTC · Mar 9, 2023Data breach160
Microsoft investigates claims that its GitHub account has been hackedSecurity Affairs·May 8, 17:36 UTC · May 8, 2020Data breach157
Syscoin Github has been breached, hacker replaced Syscoin Windows client with tainted versionSecurity Affairs·Jun 16, 09:52 UTC · Jun 16, 2018Data breach45
Nothing to steal? Let’s wipe. We’re analyzing the Shai Hulud 2.0 npm wormKaspersky Securelist·Dec 4, 15:46 UTC · Dec 4, 2025Data breach157
Npm Package Hijacked to Steal Data and Crypto via AIInfosecurity Magazine·Aug 29, 12:30 UTC · Aug 29, 2025Data breach57
How Secrets Lurking in Source Code Lead to Major BreachesThe Hacker News·Feb 20, 17:07 UTC · Feb 20, 2023Data breach60
Hackers breached Salesloft ’s GitHub in March, and used stole tokens in a mass attackSecurity Affairs·Sep 8, 19:20 UTC · Sep 8, 2025Data breach145
GitHub Notifies Victims Whose Private Data Was Accessed Using OAuth TokensThe Hacker News·May 28, 08:20 UTC · May 28, 2022Data breach45
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesThe Hacker News·Jun 10, 04:50 UTC · Jun 10, 2026Data breach57