Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

An anonymous researcher has dumped what they say is working exploit code for zero-day vulnerabilities across 15 software ...

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Just two months ago, researchers at the Data Intelligence Lab at the University of Hong Kong introduced CLI-Anything, a new state-of-the-art tool that analyzes any repo’s source code and generates a ...

OpenScience is an AI workbench for scientific research. You give it a goal, and it works through the research loop the way a ...

Rumor mill: OpenAI is reportedly developing a code-hosting platform designed to compete with GitHub, which is owned by Microsoft. According to The Information, the project is still in its early stages ...

Administrators of the open-source game engine Godot have blocked automated code submissions to protect repository governance and fix review backlogs.

After publicly touting pull request limits as a way to cut maintainer noise, GitHub is taking the same idea further with a new setting that lets repository admins restrict issue creation to ...