Security researchers have unveiled a new instance of repojacking that affects millions of GitHub repositories. According to an advisory published last week by Aqua Security Software, the discovered ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Ethereum smart contracts used to hide URL to secondary malware payloads in an attack chain triggered by a malicious GitHub ...

Cybersecurity researchers found risks in the GitHub Actions platform that could enable attackers to inject malicious code into software projects and initiate a supply chain attack. The way build ...

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account ...