» Tag
github
40 postsStudy: 'AI-DDoS' cuts first-time contributor merge rates 18.18% in OSS
Study across 294 repos and 2M+ PRs finds AI-generated contributions ('AI-DDoS') cut first-time contributor merge rates by 18.18% in open source.
GitLost: A Public GitHub Issue Can Leak Private Repos
GitLost shows how a public GitHub issue and a one-word prefix bypass threat detection, leaking private repo contents via Agentic Workflows.
Shai-Hulud npm Worm Infects Over 1,280 Packages
Shai-Hulud npm worm spread credential-stealing malware across over 1,280 packages.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comHanwha security cameras shipped a GitHub admin token in firmware
A GitHub admin token with access to hundreds of repos was found hardcoded in Hanwha security camera firmware, exposed via a Vite build leak.
License Laundering Exposed Across AI Dataset-to-App Supply Chains
Study of 232,270 AI supply chains reveals systematic license laundering, with obligation-bearing licenses vanishing while permissive ones persist.
Why removing an optimization made GitHub's case-folding 15x faster
How GitHub's Blackbird sped up ASCII case-folding 15x by removing an early-exit branch, unlocking full compiler vectorization for memory-speed throughput.
Open-source Claude Design rival hits 77k stars, 1M+ installs
Open Design, an open-source Claude Design rival, hit 1M+ installs and 77k GitHub stars using a file-first, agent-driven build method.
Evaluating Agentic Autofix: Canary Gates and Failure Taxonomies
GitHub's July 2026 agentic autofix preview prompts a proposed framework for evaluating AI security patches via canary testing and failure classes.
GitHub AI Agent Tricked Into Leaking Private Repos via Public Issue
Noma Labs shows how a hidden prompt in a public GitHub Issue tricked an AI agent into leaking private repo contents publicly.
Stop Re-downloading the JDK: setup-java Now Caches It
Enhance your GitHub Actions workflows with JDK caching to save time.