Discussions

• 7 You must be logged in to vote

  🤖

  URGENT: Targeted malware in our repositories altering tailwind.config.js and .gitignore via force-push. Has anyone seen this?

  Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage Welcome 🎉 Used to greet and highlight first-time discussion participants. Welcome to the community! source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  rashed-kaysar-rasel asked Jun 3, 2026 in Code Security · Answered

  

  

  

  

  15
• 4 You must be logged in to vote

  🤖

  Repeated unauthorized force-pushes to org repo after npm malware tokens keep getting compromised (injected code attached)

  Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage Welcome 🎉 Used to greet and highlight first-time discussion participants. Welcome to the community! source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  prashannaLeo asked Sep 5, 2026 in Code Security · Unanswered

  

  

  

  

  9
• 4 You must be logged in to vote

  🗃️

  Security advisory: malicious npm package changes affecting zod, nub, and standard-schema

  Product Feedback Share your thoughts and suggestions on GitHub features and improvements npm Discussions around programming langages, open source and software development source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  leobalter asked Sep 21, 2026 in npm · Unanswered

  

  

  

  

  12
• 3 You must be logged in to vote

  🤖

  Feature request: support webauthn-sk-ecdsa-sha2-nistp256@openssh.com SSH keys

  Code Security Build security into your GitHub workflow with features to keep your codebase secure Product Feedback Share your thoughts and suggestions on GitHub features and improvements Welcome 🎉 Used to greet and highlight first-time discussion participants. Welcome to the community! source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  ozyman42 asked May 23, 2026 in Code Security · Unanswered

  

  

  2
• 2 You must be logged in to vote

  🤖

  Repository advisory published 5 weeks ago: CVE request accepted but never assigned, not in the Advisory Database

  Code Security Build security into your GitHub workflow with features to keep your codebase secure AI or ML Model Question about a specific model or I’ve created a new one to share source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  douglasborthwick-crypto asked Oct 3, 2026 in Code Security · Closed · Unanswered

  

  

  

  

  5
• 2 You must be logged in to vote

  🤖

  Protecting endpoints from malware with package firewall

  Code Security Build security into your GitHub workflow with features to keep your codebase secure Product Feedback Share your thoughts and suggestions on GitHub features and improvements source:ui Discussions created via Community GitHub templates Supply chain security Discussions on Supply chain security

  ahpook asked Oct 20, 2026 in Code Security · Unanswered

  

  

  

  

  8