GitHub notifications abused to impersonate Y Combinator for crypto theft

GitHub moves to tighten npm security amid phishing, malware plague

GitHub tightens npm security with mandatory 2FA, access tokens

Fs-code – PyFilesystems for Gitlab, GitHub, and Git