Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised(safedep.io)

350 points by theanonymousone 5 months ago | 272 comments

SafeDep blog post analyzing a new Mini Shai-Hulud supply-chain malware campaign that compromised over 300 npm packages.

Malicious Rust crate Arrayref runs a build-time payload(safedep.io)

532 points by abhisek 2 months ago | 468 comments

SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

GitHub Copilot Coding Agent(github.blog)

500 points by net01 1 year ago | 316 comments

GitHub changelog post announcing the public preview of the GitHub Copilot coding agent, which can be assigned issues to work on autonomously.

Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)

77 points by nyku 2 months ago | 26 comments

GitHub Copilot code review will start consuming GitHub Actions minutes(github.blog)

249 points by whtsky 6 months ago | 172 comments