Fake security tools on GitHub push backdoors and infostealers

North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages

Another Friday, another GitHub incident

Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour