Salesforce-owned Heroku faces backlash over handling of stolen user credentialsThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Threat actor45
GitHub Bug Exposed Repositories to HijackingInfosecurity Magazine·Oct 27, 10:00 UTC · Oct 27, 2022Vulnerability42
Contrast Security partners with GitHub to deliver pipeline-native security to developersHelp Net Security·Feb 3, 00:00 UTC · Feb 3, 2022Vulnerability30
Attackers are abusing GitHub infrastructure to mine cryptocurrencySecurity Affairs·Apr 3, 10:04 UTC · Apr 3, 2021Threat actor45
GitHub introduces new tools and security features to secure codeSecurity Affairs·May 25, 06:13 UTC · May 25, 2019Vulnerability130
Crooks abuse GitHub platform to host phishing kitsSecurity Affairs·Apr 25, 20:38 UTC · Apr 25, 2019Phishing & fraud30
GitHub starts alerting developers of security vulnerabilities in dependenciesHelp Net Security·Nov 20, 00:00 UTC · Nov 20, 2017Vulnerability30
Threat actor impersonated hundreds of brands on GitHub to push infostealer malwareHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain AttackThe Hacker News·Jun 9, 05:50 UTC · Jun 9, 2026Vulnerability142
GitHub Copilot app launches as desktop home for AI coding agentsHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2026AI research130
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack RepositoriesThe Hacker News·Jun 4, 15:24 UTC · Jun 4, 2026Vulnerability142
Lawmakers Demand Answers as CISA Tries to Contain Data LeakKrebs on Security·May 22, 17:52 UTC · May 22, 2026Policy & legal55
GitHub Confirms Breach of Internal RepositoriesInfosecurity Magazine·May 20, 10:45 UTC · May 20, 2026Ransomware60
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI CredentialsThe Hacker News·Mar 25, 06:34 UTC · Mar 25, 2026Data breachCVE-2026-3363460
Massive GitHub malware operation spreads BoryptGrab stealerSecurity Affairs·Mar 8, 13:38 UTC · Mar 8, 2026Malware42
Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attackHelp Net Security·Sep 16, 00:00 UTC · Sep 16, 2025Data breach57
GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projectsSecurity Affairs·Feb 26, 06:27 UTC · Feb 26, 2025Threat actor157
GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing AttacksThe Hacker News·Oct 12, 04:55 UTC · Oct 12, 2024Phishing & fraud30
Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to riseHelp Net Security·Aug 7, 00:00 UTC · Aug 7, 2024RansomwareCVE-2021-22205160
Critical GitHub Enterprise Server Auth Bypass bug. Fix it now!Security Affairs·May 22, 10:05 UTC · May 22, 2024VulnerabilityCVE-2024-4985160
A new Repojacking attack exposed over 4,000 GitHub repositories to hackSecurity Affairs·Sep 12, 16:10 UTC · Sep 12, 2023Vulnerability55
Millions Face RepoJacking Risk on GitHub RepositoriesInfosecurity Magazine·Jun 26, 17:00 UTC · Jun 26, 2023Vulnerability42
Hackers create fake GitHub profiles to deliver malware through repositoriesThe Record·Jun 14, 17:37 UTC · Jun 14, 2023Malware55
Okta revealed that its private GitHub repositories were hackedSecurity Affairs·Dec 21, 19:32 UTC · Dec 21, 2022Ransomware57
Facebook to work with GitHub to invalidate leaked API access tokensThe Record·Dec 19, 00:00 UTC · Dec 19, 2022AI tools & infra130
Attackers impersonate CircleCI to compromise GitHub accountsSecurity Affairs·Sep 25, 16:34 UTC · Sep 25, 2022Threat actor45
Hackers Using Fake CircleCI Notifications to Hack GitHub AccountsThe Hacker News·Sep 23, 14:04 UTC · Sep 23, 2022Threat actor45
Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VMSecurity Affairs·Jul 12, 07:26 UTC · Jul 12, 2022Vulnerability42
GitHub: Nearly 100K NPM credentials stolen in April OAuth token attackSecurity Affairs·May 28, 11:01 UTC · May 28, 2022Threat actor145
GitGuardian now available on GitHub MarketplaceHelp Net Security·Aug 19, 00:00 UTC · Aug 19, 2021Policy & legal30
GitHub paid out over $500K through its bug bounty program for 203 flawsSecurity Affairs·Jun 29, 07:06 UTC · Jun 29, 2021Vulnerability30
Ubuntu-Maker Canonical’s GitHub Account Gets HackedThe Hacker News·Jul 7, 15:58 UTC · Jul 7, 2019Malware42
The Winnti Gang continues its activity and leverages GitHub for C&C CommunicationsSecurity Affairs·May 7, 12:32 UTC · May 7, 2018Malware42
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignThe Hacker News·Apr 29, 08:29 UTC · Apr 29, 2026Malware42
Checkmarx supply chain attack impacts Bitwarden npm distribution pathSecurity Affairs·Apr 25, 21:59 UTC · Apr 25, 2026Data breach57
Handling people's personal data is sensitive businessTroy Hunt·Nov 22, 10:50 UTC · Nov 22, 2016Data breach57
GitHub revamps bug bounty program with new VIP tier, payout changesHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Exploit / PoC160
GitHub Updates actions/checkout to Block Common Pwn Request Attack PatternsThe Hacker News·Jun 23, 14:22 UTC · Jun 23, 2026Vulnerability42
Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth TokensThe Hacker News·Jun 6, 08:09 UTC · Jun 6, 2026Vulnerability130