The open source project said hackers stole its codebase and threatened to publish its source code if the company did not pay.

Open-source repositories are collapsing under the strain of 10 trillion downloads annually. All the major repositories are joining together to tackle this problem. While a lack of funds is a major ...

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on ...

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

A fake Claude code installer can successfully exfiltrate decrypted cookies, passwords and payment methods from Chromium ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...

OpenAI says malware tied to the Shai-Hulud supply chain attack accessed internal repositories after infecting two employee ...

Grafana refused an extortion demand after attackers used a stolen GitHub token to download code, with no customer data ...

OpenAI was hit by a supply chain attack involving hackers publishing a malicious version of Tanstack software used for web development.