How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

GitHub Copilot emits GPL code(codeium.com)

465 points by fortenforge 3 years ago | 300 comments

Codeium blog post arguing that GitHub Copilot reproduces GPL-licensed code while Codeium excludes non-permissive code from its training data.

HackEurope 2026: A short rant on AI and hackathons(duti.dev)

48 points by mindracer 2 months ago | 39 comments

Arm64 on GitHub Actions(github.blog)

213 points by sonichigo 2 years ago | 77 comments

Over 100k Infected Repos Found on GitHub(apiiro.com)

236 points by gnabgib 2 years ago | 153 comments

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)

215 points by hermitcrab 1 month ago | 89 comments

A Successful Software blog post complaining that GitHub has not removed malicious software imitating the author's product three weeks after it was reported.

Git-bug: Distributed, offline-first bug tracker embedded in Git(github.com)

322 points by alentred 1 month ago | 107 comments

GitHub repository for git-bug, a distributed, offline-first bug tracker that stores issues inside a Git repository.

Breaking Git with a carriage return and cloning RCE(dgl.cx)

357 points by dgl 1 year ago | 147 comments

A blog post explaining CVE-2025-48384, a Git vulnerability where carriage return handling allows remote code execution via git clone --recursive on Unix-like systems.