Why write SQL queries when you can get an LLM to write the code for you? Query NFL data using querychat, a new chatbot ...

On September 5, 2025, GitGuardian discovered GhostAction, a massive supply chain attack affecting 327 GitHub users across 817 ...

Databot is an experimental alternative to querychat that works with R or Python. And it’s now available as an add-on for the ...

A new supply chain attack on GitHub, dubbed 'GhostAction,' has compromised 3,325 secrets, including PyPI, npm, DockerHub, ...

A supply chain attack involving malicious GitHub Action workflows has impacted hundreds of repositories and thousands of ...

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Attackers abused GitHub Actions workflows to siphon off thousands of credentials from hundreds of npm and PyPI repositories.

Cybersecurity professionals at HiddenLayer exposed a sophisticated attack method dubbed the "CopyPasta License Attack" ...

The malware tricks IT personnel into downloading malicious GitHub Desktop installers with GPU-gated decryption targeting ...

Cybersecurity firm HiddenLayer uncovers a “CopyPasta License Attack” that exploits Coinbase’s favored AI coding tool, Cursor.

"Vibe coding" is a phenomenon that curiously differs in definition depending on who you're asking. It's a spectrum of sorts; ...