Technology ❯ Software Development ❯ Version Control

GitHub

Pull Requests Repository Management GitHub Actions GitHub Copilot Collaboration Tools AI Integration Project Management GitHub MCP Server Integrations Copilot

Coordinated npm Attack Used GitHub Actions Flaws to Push Malicious TanStack Releases

The breach highlights weak points in GitHub Actions workflows that let attackers turn trusted builds into delivery channels.

Stories older than 24h

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Hackers Exploit Critical LiteLLM SQL Injection Within 36 Hours of Advisory

Warp Open-Sources Its Client With GPT-Driven Agent Workflow

Checkmarx Confirms LAPSUS$ Posted Data Stolen From Its GitHub After Supply-Chain Breach

Litecoin Rewrites 13 Blocks After Exploit in Its MWEB Privacy Layer

Anthropic Launches Cloud‑Run Routines for Claude Code as Desktop App Gets Overhaul

GitHub Disables Copilot ‘Tips’ in Pull Requests After Outcry

GitHub Pulls Copilot ‘Tips’ From Pull Requests After Bug Inserts Ad‑Like Text

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

GitHub to Train Copilot on User Interactions by Default Starting April 24

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

Google Turns AI Studio Into Agent-Powered Platform for Production Apps

MCP Audits Expose Security Gaps as Project Sets 2026 Roadmap for Production Readiness

Anthropic Launches Multi-Agent Code Review for Claude Code

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Wiz Finds Verified Secret Leaks at 65% of Leading Private AI Firms

Anthropic Debuts Claude for Life Sciences and Launches Claude Code on the Web and iOS