Everything TechSec Observer has reported about GitHub: 3 stories, newest first. Part of our Vulnerabilities coverage.
Developer Brandon Thomas has published GridCraft, DeckCraft and WordCraft as free, cross-platform alternatives to Microsoft Office, aiming to bypass subscription models.
Researchers showed how reclaiming old GitHub repository names enabled attackers to publish malicious npm package versions without stealing credentials.
Developers can now embed repository-specific rules, specialised agents and external tool connections directly into their codebases to guide AI behaviour.