Technology ❯ Software Development ❯ Version Control

GitHub

Pull Requests Repository Management GitHub Actions GitHub Copilot Collaboration Tools AI Integration Project Management Integrations GitHub MCP Server Copilot

LiteLLM SQL Injection Exploited Within Hours of Public Disclosure

The flaw exposes cloud provider keys stored by the AI gateway, putting connected cloud accounts at risk.

Warp Open-Sources Its Client With GPT-Driven Agent Workflow

Checkmarx Confirms LAPSUS$ Posted Data Stolen From Its GitHub After Supply-Chain Breach

Litecoin Rewrites 13 Blocks After Exploit in Its MWEB Privacy Layer

Anthropic Launches Cloud‑Run Routines for Claude Code as Desktop App Gets Overhaul

GitHub Disables Copilot ‘Tips’ in Pull Requests After Outcry

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

GitHub to Train Copilot on User Interactions by Default Starting April 24

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

Google Turns AI Studio Into Agent-Powered Platform for Production Apps

MCP Audits Expose Security Gaps as Project Sets 2026 Roadmap for Production Readiness

Anthropic Launches Multi-Agent Code Review for Claude Code

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Wiz Finds Verified Secret Leaks at 65% of Leading Private AI Firms

Anthropic Debuts Claude for Life Sciences and Launches Claude Code on the Web and iOS

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Salesloft Traces Drift Data-Theft Campaign to March GitHub Breach

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging