[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:github":3},{"vendor":4,"products":15,"links":31,"research":47,"news":100,"iocs":153,"iocs_total":230,"activity":231},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"github","GitHub","github.com","https:\u002F\u002Fgithub.com\u002F","US","Code hosting platform owned by Microsoft. GitHub Security Lab researches open-source vulnerabilities.","\u002Fvendor-logos\u002Fgithub.png",null,"Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.","2026-10-16T13:44:12.179385+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.","Fix vulnerabilities and safeguard your software supply chain with built-in, AI-powered security.",[23,27],{"slug":24,"name":25,"problem":26},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":28,"name":29,"problem":30},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[32,36,40,44],{"kind":33,"label":34,"url":35},"advisories","GitHub Advisory Database","https:\u002F\u002Fgithub.com\u002Fadvisories",{"kind":37,"label":38,"url":39},"research","GitHub Security Lab","https:\u002F\u002Fsecuritylab.github.com\u002F",{"kind":41,"label":42,"url":43},"review","PeerSpot: GitHub Advanced Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgithub-advanced-security-reviews",{"kind":41,"label":45,"url":46},"Gartner Peer Insights: GitHub user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgithub-826147115",{"total":48,"stories":49},13,[50,55,60,65,70,75,80,85,90,95],{"slug":51,"title":52,"published_at":53,"brief":54},"github-actions-adds-cache-mode-to-limit-cache-poisoning-risk-d65f1f","GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk","2026-09-16T19:36:23.9+00:00","GitHub Actions adds cache-mode to mitigate cache poisoning risks.",{"slug":56,"title":57,"published_at":58,"brief":59},"new-github-pypi-policies-boost-supply-chain-security-7123e6","New GitHub, PyPI Policies Boost Supply Chain Security","2026-07-27T14:26:00+00:00","GitHub and PyPI implement new policies to enhance supply chain security.",{"slug":61,"title":62,"published_at":63,"brief":64},"github-adds-3-day-dependabot-cooldown-to-limit-poisoned-package-adoption-c2fbf6","GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption","2026-07-27T08:01:23+00:00","GitHub Dependabot adds a 3-day cooldown for version updates to prevent poisoned package adoption.",{"slug":66,"title":67,"published_at":68,"brief":69},"npm-12-disables-install-scripts-by-default-to-reduce-supply-chain-risk-470b8a","npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk","2026-07-09T16:49:02+00:00","npm 12 disables install scripts by default to mitigate supply chain risks.",{"slug":71,"title":72,"published_at":73,"brief":74},"github-updates-actions-checkout-to-block-common-pwn-request-attack-patterns-a790ae","GitHub Updates actions\u002Fcheckout to Block Common Pwn Request Attack Patterns","2026-06-23T14:22:03+00:00","GitHub updates actions\u002Fcheckout to block pwn request attacks via pull_request_target.",{"slug":76,"title":77,"published_at":78,"brief":79},"github-actions-checkout-now-blocks-risky-pull-request-target-checkouts-ff5e2e","GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts","2026-06-20T04:31:03.776+00:00","GitHub Actions Checkout v7 now blocks risky pull_request_target checkouts by default.",{"slug":81,"title":82,"published_at":83,"brief":84},"npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks-5a22eb","NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks","2026-06-13T15:52:58+00:00","NPM 12 will block script execution from dependencies by default to prevent supply chain attacks.",{"slug":86,"title":87,"published_at":88,"brief":89},"npm-adds-2fa-gated-publishing-and-package-install-controls-against-supply-chain--02411a","npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks","2026-05-23T16:35:10+00:00","npm adds 2FA-gated publishing and package install controls to combat supply chain attacks.",{"slug":91,"title":92,"published_at":93,"brief":94},"threatsday-bulletin-pqc-push-ai-vuln-hunting-pirated-traps-phishing-kits-20-more","ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories","2026-03-26T11:45:00+00:00","Weekly threat roundup covers PQC migration, AI vuln hunting, Sandworm backdoors, crypto wallet scams, and phishing kits.",{"slug":96,"title":97,"published_at":98,"brief":99},"all-294-000-unreviewed-github-advisories-are-available-now-give-it-about-15-seco","💥 All 294,000+ unreviewed GitHub advisories are available now. Give it about 15 seconds or so to...","2026-03-24T00:34:34+00:00","GitHub releases 294,000+ unreviewed security advisories as searchable dataset.",{"total":101,"stories":102},75,[103,108,113,118,123,128,133,138,143,148],{"slug":104,"title":105,"published_at":106,"brief":107},"ghostaction-compromises-about-1-900-github-accounts-targets-over-30-000-reposito-871699","GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories","2026-10-15T08:45:10+00:00","GhostAction campaign compromises 1,900 GitHub accounts, targets 30,000+ repositories.",{"slug":109,"title":110,"published_at":111,"brief":112},"github-tightens-npm-publishing-after-flaw-left-1-500-packages-vulnerable-to-hija-3d29c8","GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking","2026-10-13T16:18:18+00:00","GitHub expires npm trusted publishing configs after 48 hours to prevent package hijacking.",{"slug":114,"title":115,"published_at":116,"brief":117},"credential-stealing-github-actions-workflows-planted-in-tens-of-thousands-of-rep-bf8959","Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories","2026-10-09T19:14:28+00:00","GhostAction campaign compromises GitHub accounts to inject malicious workflows into repositories.",{"slug":119,"title":120,"published_at":121,"brief":122},"new-ghostaction-wave-hits-hundreds-of-repos-expanding-beyond-ci-cd-secrets-to-cl-63e4c5","New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI\u002FCD Secrets to Cloud Credentials","2026-10-09T12:07:00.455+00:00","GhostAction campaign expands to steal cloud credentials from Git history and working tree.",{"slug":124,"title":125,"published_at":126,"brief":127},"introducing-socket-scanning-for-vs-code-marketplace-extensions-6e30bc","Introducing Socket Scanning for VS Code Marketplace Extensions","2026-10-06T19:07:23.184+00:00","Socket launches experimental scanning for VS Code Marketplace extensions to detect malicious code.",{"slug":129,"title":130,"published_at":131,"brief":132},"github-actions-re-enabled-with-mini-shai-hulud-payload-still-active-fa5c03","GitHub Actions re-enabled with Mini Shai-Hulud payload still active","2026-09-26T14:19:46+00:00","Compromised GitHub Actions re-enabled with active malware payload for over a week.",{"slug":134,"title":135,"published_at":136,"brief":137},"happy-birthday-shai-hulud-58c7a2","Happy Birthday, Shai-Hulud","2026-09-18T18:46:45.889+00:00","Shai-Hulud npm worm anniversary highlights year of supply chain attacks and arrests.",{"slug":139,"title":140,"published_at":141,"brief":142},"plugin4shell-lets-repository-owners-swap-pinned-plugin-code-across-four-ai-codin-68651e","Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents","2026-09-18T11:01:01+00:00","Flaw in AI coding agents allows repo owners to swap pinned plugin code for malicious versions.",{"slug":144,"title":145,"published_at":146,"brief":147},"australia-arrests-alleged-teampcp-hackers-behind-supply-chain-attacks-e686c2","Australia arrests alleged TeamPCP hackers behind supply-chain attacks","2026-08-27T13:31:13+00:00","Australia arrests two men linked to TeamPCP, a hacking group behind supply-chain attacks.",{"slug":149,"title":150,"published_at":151,"brief":152},"chaindrop-supply-chain-compromise-anatomy-of-a-self-propagating-worm-7e48a2","ChainDrop supply chain compromise: Anatomy of a self-propagating worm","2026-08-04T23:46:41+00:00","Credential-stealing worm in 400+ npm packages self-propagates by republishing malicious updates.",[154,157,160,161,164,166,168,170,173,175,177,183,184,188,189,191,193,195,196,201,202,204,209,215,217,220,222,224,226,228],{"type":155,"value":156,"article_slug":104,"article_title":105,"published_at":106},"malware","GhostAction",{"type":158,"value":159,"article_slug":114,"article_title":115,"published_at":116},"ip","193.32.204.199",{"type":158,"value":159,"article_slug":119,"article_title":120,"published_at":121},{"type":162,"value":163,"article_slug":119,"article_title":120,"published_at":121},"mitre_attack","T1003",{"type":162,"value":165,"article_slug":119,"article_title":120,"published_at":121},"T1040",{"type":162,"value":167,"article_slug":119,"article_title":120,"published_at":121},"T1078.004",{"type":162,"value":169,"article_slug":119,"article_title":120,"published_at":121},"T1539",{"type":171,"value":172,"article_slug":119,"article_title":120,"published_at":121},"url","hxxp:\u002F\u002F193.32.204[.]199\u002F?c=monami",{"type":171,"value":174,"article_slug":124,"article_title":125,"published_at":126},"hxxps:\u002F\u002Ffingercakes4sale[.]store\u002FdsyuC",{"type":155,"value":176,"article_slug":129,"article_title":130,"published_at":131},"Mini Shai-Hulud",{"type":178,"value":179,"article_slug":180,"article_title":181,"published_at":182},"domain","t.m-kosche[.]com","compromised-github-actions-came-back-online-and-resumed-executing-mini-shai-hulu-6c0fd0","Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware","2026-09-25T14:44:41+00:00",{"type":155,"value":176,"article_slug":180,"article_title":181,"published_at":182},{"type":155,"value":176,"article_slug":185,"article_title":186,"published_at":187},"re-enabled-github-actions-expose-thousands-of-repositories-to-mini-shai-hulud-ca9735","Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud","2026-09-24T21:14:48.798+00:00",{"type":155,"value":176,"article_slug":134,"article_title":135,"published_at":136},{"type":155,"value":190,"article_slug":134,"article_title":135,"published_at":136},"Sha1-Hulud: The Second Coming",{"type":155,"value":192,"article_slug":134,"article_title":135,"published_at":136},"Shai-Hulud",{"type":171,"value":194,"article_slug":134,"article_title":135,"published_at":136},"https:\u002F\u002Fgithub.com\u002FTeamPCP\u002FShai-Hulud",{"type":155,"value":176,"article_slug":149,"article_title":150,"published_at":151},{"type":178,"value":197,"article_slug":198,"article_title":199,"published_at":200},"npm-cache.com","shai-hulud-npm-worm-returns-poisoning-over-1-280-npm-packages-7a3f92","Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages","2026-08-04T18:31:10+00:00",{"type":155,"value":192,"article_slug":198,"article_title":199,"published_at":200},{"type":171,"value":203,"article_slug":198,"article_title":199,"published_at":200},"https:\u002F\u002Fgithub.com\u002FShai-Hulud-Here-We-Go-Again",{"type":155,"value":205,"article_slug":206,"article_title":207,"published_at":208},"AMOS-family stealer","threatsday-android-spyware-plc-attacks-ai-image-prompt-injection-12-more-stories-0fad97","ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories","2026-07-23T15:02:07+00:00",{"type":210,"value":211,"article_slug":212,"article_title":213,"published_at":214},"cve","CVE-2026-41940","large-scale-github-actions-abuse-powers-a-distributed-cpanel-and-whm-exploitatio-4cf38e","Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign","2026-07-22T20:10:30.006+00:00",{"type":178,"value":216,"article_slug":212,"article_title":213,"published_at":214},"f5b0b742-240a-4811-8a5b-b0ba6060685d.dnshook.site",{"type":218,"value":219,"article_slug":212,"article_title":213,"published_at":214},"hash_sha256","22f721fd3a81d2e27cbf90a122bb977f630c50b79daa98350f0e57b04dfa81f1",{"type":158,"value":221,"article_slug":212,"article_title":213,"published_at":214},"43.228.157.68",{"type":171,"value":223,"article_slug":212,"article_title":213,"published_at":214},"hxxp:\u002F\u002F43.228.157.68:80\u002Fapi\u002Fdl\u002F386",{"type":171,"value":225,"article_slug":212,"article_title":213,"published_at":214},"hxxp:\u002F\u002F43.228.157.68:80\u002Fapi\u002Fdl\u002Famd64",{"type":171,"value":227,"article_slug":212,"article_title":213,"published_at":214},"hxxp:\u002F\u002F43.228.157.68:80\u002Fapi\u002Fdl\u002Farm",{"type":171,"value":229,"article_slug":212,"article_title":213,"published_at":214},"hxxp:\u002F\u002F43.228.157.68:80\u002Fapi\u002Fdl\u002Farm64",127,[232,236,240,243,247,249],{"month":233,"reported":234,"affected":235},"2026-05-01",1,27,{"month":237,"reported":238,"affected":239},"2026-06-01",5,11,{"month":241,"reported":242,"affected":239},"2026-07-01",4,{"month":244,"reported":245,"affected":246},"2026-08-01",0,3,{"month":248,"reported":234,"affected":238},"2026-09-01",{"month":250,"reported":245,"affected":238},"2026-10-01"]