A coordinated botnet of compromised GitHub accounts launched a widespread attack, opening seemingly harmless pull requests before pushing a malicious shell script directly to default branches. The ...
GitGuardian researchers discover massive supply chain attack affecting 817 repositories across 327 GitHub users. Malicious workflows exfiltrated 3,325 secrets including PyPI, npm, and DockerHub tokens ...
An APT verification bypass can let an attacker replace a package and run code as root. Learn how to patch CI/CD runners and container images, and use Harden-Runner to find HTTP package downloads and ...
A poisoned VS Code extension breached GitHub. A trojanized PyPI package hit Microsoft. Compromised GitHub Actions and a self-spreading npm worm targeted thousands more. In just 48 hours, attackers hit ...
On June 8, 2026, multiple Graph ML PyPI packages in the bioinformatics ecosystem were compromised in the Hades campaign, deploying cross-platform memory scrapers, AI prompt injections to misdirect ...
A week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in multiple targets. The attacker, an autonomous bot called ...
We reproduced the *sshole OpenSSH authentication bypass on Alpine Linux. See the exact exposure conditions, lab results, patched versions, and mitigations for musl-based hosts and containers.
A compromised release of @ethersphere/bee-js executes malicious code during installation. The payloads target Swarm Desktop wallet data and attempt to establish persistent access on affected systems.
On March 19, 2026, aquasecurity/trivy-action — a widely used GitHub Action for running the Trivy vulnerability scanner — was compromised for approximately 12 ...
On March 16, 2026, StepSecurity Threat Intel was the first to detect and report malicious releases in two popular React Native npm packages — react-native-international-phone-number and ...
On October 29, 2026, trojanized builds (2.1.312 and 2.1.313) of the official Claude Code VS Code extension were published to Cursor's VS Code Extension Marketplace for macOS and Windows.
The rule list shows every rule's campaign, severity, revision, and how many of its checks are required. Coverage spans the campaigns that have hit GitHub repositories hardest, including Miasma, Mini ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results