Alleged MuddyWater attack downloads a PowerShell script from GitHubSecurity Affairs·Jan 4, 08:49 UTC · Jan 4, 2021Malware142
Microsoft investigates claims that its GitHub account has been hackedSecurity Affairs·May 8, 17:36 UTC · May 8, 2020Data breach157
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksThe Hacker News·Aug 4, 15:03 UTC · Aug 4, 2026Malware142
Grafana Labs Says Code Breach Stemmed from TanStack AttackInfosecurity Magazine·May 21, 08:00 UTC · May 21, 2026Ransomware57
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer AccountThe Hacker News·May 21, 05:56 UTC · May 21, 2026Malware42
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 HoursThe Hacker News·Mar 11, 14:37 UTC · Mar 11, 2026Malware42
Nothing to steal? Let’s wipe. We’re analyzing the Shai Hulud 2.0 npm wormKaspersky Securelist·Dec 4, 15:46 UTC · Dec 4, 2025Data breach157
Npm Package Hijacked to Steal Data and Crypto via AIInfosecurity Magazine·Aug 29, 12:30 UTC · Aug 29, 2025Data breach57
Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RATThe Hacker News·Jan 3, 04:52 UTC · Jan 3, 2025Malware142
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged AgentThe Hacker News·Aug 4, 11:16 UTC · Aug 4, 2026Exploit / PoC in the wild60
Injective Labs GitHub Compromise Pushes Wallet-KeyThe Hacker News·Jul 10, 17:54 UTC · Jul 10, 2026Malware42
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain AttacksThe Hacker News·Jun 11, 06:23 UTC · Jun 11, 2026Industry42
North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ FirmsThe Hacker News·Apr 6, 16:05 UTC · Apr 6, 2026Malware42
New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for StealthThe Hacker News·Apr 5, 08:10 UTC · Apr 5, 2025Malware42
U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 27, 12:31 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2019-9875CVE-2019-9874CVE-2025-3015460
Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHubThe Hacker News·Mar 11, 16:06 UTC · Mar 11, 2025VulnerabilityCVE-2024-4345147
GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack WalletsThe Hacker News·Feb 25, 10:13 UTC · Feb 25, 2025Malware42
Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code RepositoriesThe Hacker News·Jul 9, 04:48 UTC · Jul 9, 2024Malware42
Hackers Breach Okta's GitHub Repositories, Steal Source CodeThe Hacker News·Dec 22, 13:25 UTC · Dec 22, 2022Ransomware157
North Korea-linked Lazarus APT used Windows Update client and GitHub in recent attacksSecurity Affairs·Jan 27, 20:30 UTC · Jan 27, 2022Threat actor57
SLUB Backdoor leverages GitHub and Slack in targeted attacksSecurity Affairs·Mar 9, 05:53 UTC · Mar 9, 2019MalwareCVE-2018-8174CVE-2015-170147
NSA Opens Github Account — Lists 32 Projects Developed by the AgencyThe Hacker News·Jun 21, 07:01 UTC · Jun 21, 2017Ransomware57
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsThe Hacker News·Aug 7, 08:18 UTC · Aug 7, 2026Exploit / PoC in the wildCVE-2026-12537CVE-2026-54316160
GitHub delays version updates so malware gets caught firstHelp Net Security·Jul 27, 00:00 UTC · Jul 27, 2026Malware142
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesThe Hacker News·Jun 10, 04:50 UTC · Jun 10, 2026Data breach57
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent ImplantsThe Hacker News·Apr 6, 06:40 UTC · Apr 6, 2026Vulnerability142
GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 CompaniesThe Hacker News·Sep 9, 09:48 UTC · Sep 9, 2025Data breach57
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt StrikeCisco Talos·Aug 1, 12:00 UTC · Aug 1, 2024Threat actorCVE-2018-0824160
Cyber Criminals Exploit GitHub and FileZilla to Deliver Malware CocktailThe Hacker News·May 21, 11:11 UTC · May 21, 2024Malware42
What can we learn from the passwords used in bruteCisco Talos·May 2, 18:00 UTC · May 2, 2024Ransomware57
Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHubThe Hacker News·Jan 23, 18:40 UTC · Jan 23, 2024Threat actor157
Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to MalwareThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Exploit / PoCCVE-2023-35829CVE-2023-2087160
130 Dropbox code repos plundered after successful phishing attackHelp Net Security·Nov 2, 00:00 UTC · Nov 2, 2022Phishing & fraud42
GitHub Repojacking Bug Could've Allowed Attackers to Takeover Other Users' RepositoriesThe Hacker News·Oct 31, 09:17 UTC · Oct 31, 2022Threat actor57
Week in review: BlueKeep, GitHub automated security fixes, reducing the threat of legacy appsHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2019Ransomware57
Connecting the dots between recently active cryptominersCisco Talos·Dec 18, 16:33 UTC · Dec 18, 2018Malware42
Ransomware is now open Source and available on GitHubSecurity Affairs·Nov 24, 15:01 UTC · Nov 24, 2017Ransomware57
AhMyth Android RAT, another open source Android RAT Tool available on GitHubSecurity Affairs·Oct 23, 09:38 UTC · Oct 23, 2017Malware42