The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM ...

The latest hacking campaign targeting GitHub npm repositories can self-propagate, wipe data, and hide more effectively, ...

Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days A self-propagating malware targeting node package managers (npm) is back for a second round ...

GitHub says unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories.

The latest attack from the self-replicating npm-package poisoning worm can also steal credentials and secrets from AWS, ...

The GitHub code you use to build a trendy application or patch existing bugs might just be used to steal your bitcoin BTC $92,263.65 or other crypto holdings, according to a Kaspersky report. GitHub ...

GitHub, one of the largest repositories of commercial and open source software on the web, has been hacked. Over the weekend, developer Egor Homakov exploited a gaping vulnerability in GitHub that ...