Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Millions of users of GitHub, the premier online platform for sharing open-source software, rely on stars to establish their ...

Ethereum smart contracts used to hide URL to secondary malware payloads in an attack chain triggered by a malicious GitHub ...

Cybercriminals use fake troubleshooting websites to trick Mac users into running terminal commands that install Shamos malware through ClickFix tactics.

On September 5, 2025, GitGuardian discovered GhostAction, a massive supply chain attack affecting 327 GitHub users across 817 ...

Bad actors are using GitHub's repository structure and paid Google Ads placements to trick EU IT users into downloading a unique malware dubbed "GPUGate" that includes new hardware-specific evasion ...

Blockstream warned Jade hardware wallet users about a phishing scam that sends fake emails with claims of a firmware update.

Simple-looking code tapped Ethereum’s blockchain to fetch hidden URLs that directed compromised systems to download ...

“What is new and different is the use of Ethereum smart contracts to host the URLs where malicious commands are located, ...