GitHub New Vulnerability Reporting Scheme

GitHub New Vulnerability Reporting Scheme

GitHub has introduced a new direct channel for security researchers to report vulnerabilities in public repositories. This needs to be manually enabled by repository maintainers and, once active, enables security…
Github 35K Malicious Code Insertions

Github 35K Malicious Code Insertions

A threat actor with a name "Pl0xP" cloned a large number of GitHub repositories and changed the cloned repository names, in a typosquatting effort to impersonate legitimate projects. The widespread cloning…
Harming NPM Packages for illicit Activity

Harming NPM Packages for illicit Activity

Researchers at Aqua’s Team Nautilus published a security advisory on the issue of hijacking developers of Open-source software, which allowed threat actors to masquerade a malicious NPM package as legitimate…