Computing

Security issues identified on GitHub

Two separate research studies have found companies are leaking information on GitHub, and the site itself is being targeted.
SecurityWeek

Many Forbes AI 50 Companies Leak Secrets on GitHub

Wiz has analyzed GitHub repositories pertaining to the world’s largest AI companies and found that many had leaked verified ...

AI Giants Accidentally Leaking Secrets on GitHub

Research by Wiz shows that industry titans, with combined valuations exceeding $400 billion, have left the equivalent of ...
SecurityWeek

GlassWorm Malware Returns to Open VSX, Emerges on GitHub

The GlassWorm malware has reared its ugly head again in the Open VSX registry, roughly two weeks after being removed.

Malware Still Active: GlassWorm Found Again in Open-VSX Packages

Further instances of the malware, which steals credentials and cryptocurrency, have appeared on Open VSX and aim to establish ...
CSO Online

Malicious npm package sneaks into GitHub Actions builds

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

AI companies keep publishing private API keys to GitHub

"Hugging Face tokens are notorious for allowing access to private AI models," said Berkovich. "The leaked Hugging Face token belonging to an AI 50 company could have exposed access to ~1,000 private ...
ITWire

Changing of the guard at GitHub signals a new Microsoft-AI focus for the world's home of open source software

GitHub CEO Thomas Dohmke has announced his resignation. After nearly four years in the top job he's returning to his entrepreneurial roots to co-found a startup. Microsoft has chosen not to appoint a ...