Cybercriminals are exploiting GitHub to spread credential-stealing malware through fake repositories, cybersecurity firm Kaspersky has warned. The campaign, dubbed “GitVenom,” involves attackers ...

Hackers are creating hundreds of fake GitHub projects aiming to dupe users into downloading crypto and credential-stealing ...

Discover 16 self-hosted GitHub projects that combine privacy, control, and innovation. Reclaim your data and explore the best ...

Since the Dependency Graph feature is intertwined with the Security Alerts (Vulnerability Alerts) feature, this also means GitHub users will also be eligible to receive automatic security alerts for ...

GitHub projects have been targeted with malicious commits and pull requests, in an attempt to inject backdoors into these projects. Most recently, the GitHub repository of Exo Labs, an AI and machine ...

Researchers use the OpenSSF Scorecard to measure the security of the 50 most popular generative AI large language model projects on GitHub. Researchers from software supply chain security firm ...

Major developer platform GitHub faced a widespread malware attack and reported 35,000 “code hits” on a day that saw thousands of Solana-based wallets drained for millions of dollars. The widespread ...

GitHub has issued a security alert on Thursday warning about a new malware strain that's been spreading on its site via boobytrapped Java projects. The malware, which GitHub's security team has named ...

What are the hottest projects on GitHub? With some help from the GitHub Archive, FastCoLabs tracked down the most starred, forked, and watched projects so far this year. GitHub hosts millions of ...