Explore >> Select a destination

You are here

 github.blog
Action needed for GitHub Desktop and Atom users - The GitHub Blog
| | securitylab.github.com
Keeping your GitHub Actions and workflows secure Part 3: How to trust your building blocks | GitHub Security Lab
4.2 parsecs away

Travel
| | In this article, well discuss sometimes less obvious attack vector whose code GitHub Actions are running.
| | snyk.io
Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months | Snyk
17.2 parsecs away

Travel
| | An overview of how the malicious flatmap-stream npm package operates, and remediation steps to follow if you've been affected.
| | securitylab.github.com
GHSL-2023-107: GitHub Actions Command Injection in Jellyfin | GitHub Security Lab
3.9 parsecs away

Travel
| | The jellyfin/jellyfin repository is vulnerable to a command injection in Actions, allowing an attacker to take over the GitHub Actions runner and leak secrets.
| | www.reversinglabs.com
7 container security best practices
50.5 parsecs away

Travel
| With the rise of attacks on the supply chain and threats from AI, a modern strategy for securing containers is required. Here are key considerations.