In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...

GitHub rolled out several updates this week aimed at developer collaboration, open source security and enterprise billing.

In the light of recent supply chain attacks targeting the NPM ecosystem, GitHub will implement tighter authentication and ...

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Following a number of recent high-profile attacks and hacking attempts, GitHub has decided to make substantial changes to the ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Cloudflare announced its decision to open source VibeSDK, a platform that lets developers set up everything needed to run an ...

The allegations were detailed by Joel Drapper, a Ruby developer and open source maintainer who previously worked at Shopify.

The Swedish Investment Fund Association (Fondbolagens förening) has established a new working group focused on technology and ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

The bundle.js script is designed to steal npm, GitHub, AWS and GCP tokens. But it also installs TruffleHog – an open source ...

Once your RSS reader is ready, you can start adding feeds for software projects. For example, in the Feedly web app, you just ...