vendor

GitHub

Every Skillmate HackNews story about GitHub: flaws, patches and attacks, newest first.

Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate

5 posts, newest first

#SecurityNews
#GitHub

GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub

The GhostAction hacking group has redirected its campaign from initial attacks to a focus on developer endpoints and cloud access, according to Dark Reading. Earlier attacks and coverage Attackers compromised 42 GitHub...

SkillmateOct 29, 2026

#SupplyChain
#NetworkDevices
#GitHub
GitHub’s npm package firewall can block brand-new versions before they install
GitHub has announced a package firewall for npm packages that checks them against an enterprise’s policy before installation, blocking...
SkillmateOct 29, 2026
#SecurityNews
#GitHub
42 GitHub Repositories Compromised by Large Payloads
A security research firm reported that attackers compromised 42 third-party GitHub repositories by deploying large payload blobs that...
SkillmateOct 28, 2026
#SecurityNews
#GitHub
Stolen GitHub Tokens Used in Gheist Campaign to Steal Private Repository Secrets
An automated campaign called Gheist has been using stolen GitHub tokens to plant workflows that print repository secrets into GitHub...
SkillmateOct 26, 2026
#Identity
#Malware
#SupplyChain
GhostAction Attackers Use Fake Font to Steal Credentials in 94 GitHub Repos
The threat actor behind the GhostAction supply chain attack expanded their tactics by injecting a credential stealer disguised as a fake...
SkillmateOct 20, 2026

skillmate

GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub

GitHub’s npm package firewall can block brand-new versions before they install

42 GitHub Repositories Compromised by Large Payloads

Stolen GitHub Tokens Used in Gheist Campaign to Steal Private Repository Secrets

GhostAction Attackers Use Fake Font to Steal Credentials in 94 GitHub Repos