The discovery by Palo Alto Networks' Unit 42 prompted action by owners of popular repositories where secrets were leaked through GitHub Actions artifacts.

A supply chain attack involving malicious GitHub Action workflows has impacted hundreds of repositories and thousands of ...

GitHub has a problem with inauthentic "stars" used to artificially inflate the popularity of scam and malware distribution repositories, helping them reach more unsuspecting users.

Cybercriminals have found another way to spread their malware: uploading cryptocurrency mining code to GitHub, according to security researchers at security company Avast. Developers 'fork ...