GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.

GitHub has confirmed a breach involving roughly 3,800 internal repositories after an employee device was compromised through ...

TeamPCP gained access to GitHub's private source code after an employee unknowingly installed a malicious coding tool.

TeamPCP exfiltrated 3,800 internal GitHub repositories after poisoning a VS Code extension. No customer data was affected, the company says.

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...