Tag

GitHub

4 stories

Command Injection Campaign Hits 61 GitHub Repos, Aiming at CI/CD Secrets

A coordinated command-injection campaign targeted 61 public GitHub repositories on September 1, 2026, using issues, pull requests, and comments to trigger code execution inside GitHub Actions workflows. Radware’s investigation identified 83 malicious items posted that day, with most activity concentrated in two rapid waves. The incident highlights how routine project discussions can become an entry point into automated build systems when workflows treat untrusted text as executable code. How the…

Saugata DattaNov 2, 20263 min read164

AI Agents and Frameworks

GitHub’s Surge: 7.4 Billion Monthly Commits and the Infrastructure Race to Keep Up

GitHub has crossed a scale threshold few predicted: the platform is now processing 7.4 billion commits per month. That figure, announced at GitHub Universe, marks a staggering acceleration from earlier in the year — 1.4 billion monthly commits in April and 2.9 billion in August — and highlights how the nature of development activity is shifting. Behind the headline number lies a set of operational challenges and engineering responses that…

Saugata DattaOct 29, 20263 min read215

Data Breach

Supply-chain Breach: How a Leaked LiteLLM Master Key Let Attackers Push a Malicious PyPI Release

LiteLLM disclosed a serious supply-chain incident that began with a single accidentally published configuration file and escalated into a malicious package release that could execute whenever Python started. The exposure of an Agent Platform master key in late May 2026 went unrevoked and, months later, an attacker used it to extract high-privilege GitHub tokens, override release safeguards, and publish a trojaned LiteLLM package to PyPI. The fallout forced an emergency…

Saugata DattaOct 24, 20265 min read265

Cybersecurity

109 Fake GitHub Repositories Used to Deliver SmartLoader and StealC Malware

A large-scale campaign recently uncovered shows how attackers abused the trust developers place in open-source hosting to distribute two dangerous malware families, SmartLoader and StealC. By cloning legitimate projects and burying malicious ZIP archives deep inside repository structures, the threat actor made harmful downloads look like routine releases. For many victims the repository looked authentic at a glance: real source files remained intact, but documentation and release links silently pointed…

Saugata DattaApr 23, 20264 min read660

Command Injection Campaign Hits 61 GitHub Repos, Aiming at CI/CD Secrets

GitHub’s Surge: 7.4 Billion Monthly Commits and the Infrastructure Race to Keep Up

Supply-chain Breach: How a Leaked LiteLLM Master Key Let Attackers Push a Malicious PyPI Release

109 Fake GitHub Repositories Used to Deliver SmartLoader and StealC Malware

Free Tools: IP, DNS, SSL