CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub ...
Malicious npm package downloaded 676 times stole Claude AI files via GitHub uploads, increasing AI-driven malware risks.
GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.
Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...
Malicious packages across npm, PyPI, and Crates.io show how poisoned developer workflows can become a route into enterprise systems.
In just six hours, the campaign quietly pushed malware to more than 5,500 GitHub repositories, stealing credentials, ...
The ChromaToast vulnerability can be exploited by forcing the ChromaDB API server to fetch and load maliciously crafted AI ...
GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE ...
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results