About Contact

Cybersecurity Alert: GitHub Repositories Targeted in Rapid Supply Chain Attacks

Cybersecurity Alert: GitHub Repositories Targeted in Rapid Supply Chain Attacks

Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'

Attackers compromised 42 GitHub repositories by using files too large to be searched
Attackers compromised 42 GitHub repositories by using files too large to be searched

Security protections on GitHub were not breached but individual customer protections were, and autonomous coding agents played a role.

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.