Popular code repository to take action against hackers targeting popular JavaScript code packages to spread malware.

Private and deleted GitHub repositories are not as secure as users might assume. Data from deleted forks, deleted repositories, and private repositories can still be accessed, often indefinitely. This ...

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

GitHub MCP Registry makes Model Context Protocol servers with GitHub repos discoverable from Visual Studio Code.

Learn how to automate development tasks, deploy apps, and manage code effortlessly with Claude Code and GitHub. Boost your ...

GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.

GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency ...

Cybercriminals are stepping up their attacks on Mac users, using fake GitHub repositories to spread malware disguised as ...

Cybercriminals are using fake GitHub repositories to distribute Atomic Stealer malware disguised as trusted macOS apps like ...

Threat actors are impersonating known brands in a widespread campaign aimed at infecting macOS users with information stealer ...