Technology ❯ Software Development ❯ Version Control

GitHub

Pull Requests Repository Management GitHub Actions GitHub Copilot Collaboration Tools Repositories AI Integration Code Collaboration Integrations GitHub MCP Server

AI Coding Agent Tricked Into Opening Reverse Shell From 'Clean' GitHub Repo

The proof shows chains of harmless files exploit agent automatic fixes using DNS TXT fetches to run unseen code on developer machines.

Microsoft Taps AWS to Bolster GitHub as AI Usage Overwhelms Infrastructure

GitHub Releases CC0 Multilingual Repositories Dataset

Langflow Path Traversal Flaw Exploited to Write Files

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

VS Code Zero-Day Lets Attackers Steal Full GitHub OAuth Tokens

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

CISA Contractor Put Dozens of Agency Credentials on Public GitHub

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Hackers Exploit Critical LiteLLM SQL Injection Within 36 Hours of Advisory

Warp Open-Sources Its Client With GPT-Driven Agent Workflow

Checkmarx Confirms LAPSUS$ Posted Data Stolen From Its GitHub After Supply-Chain Breach

Litecoin Rewrites 13 Blocks After Exploit in Its MWEB Privacy Layer

Anthropic Launches Cloud‑Run Routines for Claude Code as Desktop App Gets Overhaul

GitHub Disables Copilot ‘Tips’ in Pull Requests After Outcry

GitHub Pulls Copilot ‘Tips’ From Pull Requests After Bug Inserts Ad‑Like Text

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

GitHub to Train Copilot on User Interactions by Default Starting April 24