Cybercriminals are exploiting GitHub to spread credential-stealing malware through fake repositories, cybersecurity firm Kaspersky has warned. The campaign, dubbed “GitVenom,” involves attackers ...

Cybersecurity researchers found risks in the GitHub Actions platform that could enable attackers to inject malicious code into software projects and initiate a supply chain attack. The way build ...

Kaspersky found that at least one victim lost 5 Bitcoin, worth around $442,000, to a malware-riddled fake project in November. Hackers are creating hundreds of fake GitHub projects aiming to dupe ...

GitHub has issued a security alert on Thursday warning about a new malware strain that's been spreading on its site via boobytrapped Java projects. The malware, which GitHub's security team has named ...

The GitHub Octocat on the floor of the company’s San Francisco headquarters. (Steve Fadden Photo, via Flickr, Creative Commons.) GitHub isn’t content with being the storage locker for your code: it ...

Millions of users of GitHub, the premier online platform for sharing open-source software, rely on stars to establish their ...

A guide to The Open Source Index and GitHub projects checklist Your email has been sent For those enterprise developers and admins who are keen on knowing which open source projects rank at the top of ...