ViHN: Vim for Hacker News(qsantos.fr)

119 points by qsantos 2 years ago | 50 comments

We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)

1080 points by hackermondev 10 months ago | 397 comments

A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.

A GitHub Issue Title Compromised 4k Developer Machines(grith.ai)

588 points by edf13 7 months ago | 181 comments

Blog post from grith.ai describing the "Clinejection" attack chain, where a prompt injection in a GitHub issue title led to a supply chain compromise of about 4,000 developer machines.

Decrypting encrypted files from Akira ransomware using a bunch of GPUs(tinyhack.com)

234 points by costco 1 year ago | 50 comments

Decrypting Encrypted files from Akira Ransomware using a bunch of GPUs(tinyhack.com)

6 points by notmine1337 1 year ago | 1 comments

Switching to Claude Code and VSCode Inside Docker(timsh.org)

230 points by timsh 1 year ago | 133 comments

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)

215 points by hermitcrab 1 month ago | 89 comments

A Successful Software blog post complaining that GitHub has not removed malicious software imitating the author's product three weeks after it was reported.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

I found 10k GitHub repositories distributing Trojan malware(orchidfiles.com)

927 points by theorchid 4 months ago | 240 comments

A blog post describing the discovery of about 10,000 GitHub repositories distributing Trojan malware and the shared pattern used to find them with a script.

GitHub is (again) having issues(githubstatus.com)

321 points by rock_artist 1 year ago | 195 comments

GitHub status page incident report about increased failure rates affecting search on GitHub.