Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments

GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos(noma.security)

487 points by ColinEberhardt 3 months ago | 187 comments

Noma Labs vulnerability research post describing how a crafted GitHub issue could trick GitHub's AI agent into leaking private repository contents.

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

GitLab discovers widespread NPM supply chain attack(about.gitlab.com)

330 points by OuterVale 11 months ago | 181 comments

GitLab blog post describing a widespread npm supply chain malware attack that includes a "dead man's switch" capable of harming user data.

Gatsby Adapters(netlify.com)

11 points by todsacerdoti 3 years ago | 0 comments