A coordinated botnet of compromised GitHub accounts launched a widespread attack, opening seemingly harmless pull requests before pushing a malicious shell script directly to default branches. The ...

2. Know where a package landed When a package turns out to be malicious, teams need to know where it was installed. Secure Registry logs every request and, with source attribution set up, links each ...

Use Harden-Runner to investigate workflow activity and enforce network policies, alongside a review of build access and OIDC trust.

A compromised release of @ethersphere/bee-js executes malicious code during installation. The payloads target Swarm Desktop wallet data and attempt to establish persistent access on affected systems.