How to listen to database changes using Postgres triggers in elixir(peterullrich.com)

137 points by pjullrich 3 years ago | 51 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)

285 points by cyberbender 1 year ago | 53 comments

Stealing from Biologists to Compile Haskell Faster(iankduncan.com)

121 points by mooreds 4 months ago | 4 comments

What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund(sniffnet.app)

13 points by dmit 2 months ago | 2 comments

1-Click GitHub Token Stealing via a VSCode Bug(blog.ammaraskar.com)

620 points by ammar2 4 months ago | 95 comments

A blog post describing a VSCode webview bug that lets an attacker steal a GitHub token with repo read/write access, including private repos, via a single click.