Repos

GitHub confirms breach of 3,800 repos via malicious VSCode extension

Cursor AI editor lets repos “autorun” malicious code on devices

We put a coding agent in a while loop

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos

Git-fetch-file – Sync files from other repos with commit tracking and safety

GitHub Action supply chain attack exposed secrets in 218 repos

DeepSeek Open Source Optimized Parallelism Strategies, 3 repos

Clever 'GitHub Scanner' campaign abusing repos to push malware

RAG for a Codebase with 10k Repos