The Megalodon supply chain attack poisoned over 5,500 GitHub repositories via automated commits injecting GitHub Actions workflows.

TeamPCP continues its attack on open source projects, now apparently asking for $50,000.

A GitHub employee has unwittingly allowed 3,800 internal repositories to be breached after a device compromise with a poisoned VS Code extension.

GitHub has confirmed that roughly 3,800 internal repositories were hacked after an employee installed an infected VS Code ...

GitHub confirmed an attacker was able to access its internal repositories after a code extension breach, with TeamPCP ...