GitHub Spam(djanes.xyz)

120 points by bl4ckneon 2 years ago | 69 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

A GitHub Issue Title Compromised 4k Developer Machines(grith.ai)

588 points by edf13 7 months ago | 181 comments

Blog post from grith.ai describing the "Clinejection" attack chain, where a prompt injection in a GitHub issue title led to a supply chain compromise of about 4,000 developer machines.

TPM GPIO fail: How bad OEM firmware ruins Intel TPM security(mkukri.xyz)

168 points by osks 2 years ago | 105 comments

How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)

215 points by hermitcrab 1 month ago | 89 comments

A Successful Software blog post complaining that GitHub has not removed malicious software imitating the author's product three weeks after it was reported.

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

I found 10k GitHub repositories distributing Trojan malware(orchidfiles.com)

927 points by theorchid 4 months ago | 240 comments

A blog post describing the discovery of about 10,000 GitHub repositories distributing Trojan malware and the shared pattern used to find them with a script.

GitHub is down again(githubstatus.com)

467 points by MattIPv4 8 months ago | 380 comments

GitHub status page incident report stating that notifications are delayed.

Another GitHub outage in the same day(githubstatus.com)

349 points by Nezteb 8 months ago | 266 comments

GitHub status page incident report for degraded service affecting Issues, Actions and Git operations.