Browsing: GitHub

Roughly 7,600 malicious GitHub repositories were uncovered, more than 800 of them posing as AI Skills or Model Context Protocol…

A financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate…

A threat actor has built a network of over 200 GitHub repositories that have been delivering Windows malware, supply chain…

Threat actors are abusing the GitHub API to systematically enumerate organizations, repositories, and user accounts, Datadog reports. Spanning multiple overlapping…

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and…

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload…

An aerospace worker and programmer created a GitHub-hosted program that lets your Steam Controller automatically walk back towards its charging…

A cryptocurrency-stealing malware campaign used inflated GitHub activity, software reviews, YouTube tutorials and favorable VirusTotal comments to make malicious trading…

Developers coordinate code across README files, issue threads, and pull request discussions. Much of that exchange happens in English, and…

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma…