Search: “GitHub personal access tokens”

38 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 50 Malware 38 Data breach 36 Ransomware 34 Threat actor 21 Exploit / PoC 19 Phishing & fraud 12 AI safety & security 11 Policy & legal 4 AI industry 3 AI tools & infra 3 Industry 2 Advisory 1 Research 1

SeverityAll critical 90 high 84 medium 42 low 10 info 11

North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign

The Hacker NewsJul 3, 09:00 UTC · Jul 3, 2025Malware

42

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours

The Hacker NewsMar 11, 14:37 UTC · Mar 11, 2026Malware

42

Leaked GitHub Python Token

Schneier on SecurityAug 2, 11:01 UTC · Aug 2, 2024Malware1

42

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

The Hacker NewsAug 8, 10:44 UTC · Aug 8, 2025Malware

42

ConnectPOS leaked Github secrets for years

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Malware

55

Massive Malicious NPM Package Attack Threatens Software Supply Chains

Recorded FutureMay 26, 00:00 UTC · May 26, 2026Malware

42

CISA urges orgs to review software after ‘Shai

The RecordSep 25, 01:38 UTC · Sep 25, 2025Malware

42

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

The Hacker NewsJul 10, 17:27 UTC · Jul 10, 2026Malware

42

Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

The Hacker NewsSep 6, 11:31 UTC · Sep 6, 2025Malware

55

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

The Hacker NewsAug 5, 07:53 UTC · Aug 5, 2026Malware

55

Malware Attack on CircleCI Engineer's Laptop Leads to Recent Security Incident

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2023Malware

30

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The Hacker NewsMay 27, 15:23 UTC · May 27, 2026Malware

42

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

The Hacker NewsApr 5, 08:10 UTC · Apr 5, 2025Malware1

42

AI-Generated npm Malware Leaks Its Own GitHub Token

Infosecurity MagazineMay 29, 08:10 UTC · May 29, 2026Malware1

30

Why NHIs Are Security's Most Dangerous Blind Spot

The Hacker NewsApr 25, 10:30 UTC · Apr 25, 2025Malware

55

Open source has a malware problem, and it's getting worse

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2025Malware

30

CISA Admin Leaked AWS GovCloud Keys on Github

Krebs on SecurityMay 20, 23:14 UTC · May 20, 2026Malware

42

New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets

The Hacker NewsMay 29, 04:19 UTC · May 29, 2023Malware

55

10 Credential Stealing Python Libraries Found on PyPI Repository

The Hacker NewsAug 10, 05:22 UTC · Aug 10, 2022Malware

55

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

The Hacker NewsJan 1, 15:52 UTC · Jan 1, 2026Malware CVE-2023-26359 CVE-2023-38205 CVE-2023-44353+7 CVEs

47

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

The Hacker NewsNov 22, 04:34 UTC · Nov 22, 2024Malware

30

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

The Hacker NewsMar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017 CVE-2026-20131

60

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706 CVE-2025-49704 CVE-2025-20281+27 CVEs

60

Malware report for Q3 2024: threat overview

Kaspersky SecurelistNov 29, 10:45 UTC · Nov 29, 2024Malware

42

Google unmasks two-year-old phishing & malware campaign targeting YouTube users

The RecordDec 18, 00:00 UTC · Dec 18, 2022Malware

30

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

The Hacker NewsJun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543 CVE-2025-5777 CVE-2025-49825+23 CVEs

60

Disclosing new PebbleDash

Kaspersky SecurelistMay 14, 11:00 UTC · May 14, 2026Malware

42

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909 CVE-2026-3910 CVE-2026-3913+40 CVEs2

60

Shai

Kaspersky SecurelistSep 25, 10:00 UTC · Sep 25, 2025Malware

42

SapphireStealer: Open-source information stealer enables credential and data theft

Cisco TalosAug 31, 12:00 UTC · Aug 31, 2023Malware1

42

⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

The Hacker NewsApr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281 CVE-2026-3502 CVE-2026-35616+1 CVEs

60

New banking trojan “CarnavalHeist” targets Brazil with overlay attacks

Cisco TalosMay 31, 12:00 UTC · May 31, 2024Malware

30

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Malware CVE-2026-45793

60

Trojaned AI Tool Leads to Disney Hack

Schneier on SecurityMar 15, 00:00 UTC · Mar 15, 2025Malware

30

Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw

Help Net SecurityMay 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659 CVE-2026-34926 CVE-2026-35616

60

OriginLogger: A Look at Agent Tesla’s Successor

Palo Alto Unit 42Jun 5, 17:53 UTC · Jun 5, 2024Malware

30

Friday Squid Blogging: Online Cephalopod Course

Schneier on SecurityMay 26, 21:05 UTC · May 26, 2023Malware

30