Skip to content
Submit incident
Organization/organizations/github

GitHub

18
Records
2024 to 2026
Years covered
5
Categories

Incidents by year

2024
1
2025
3
2026
14

Incident records18

Jul 2026AI Models Attempt Cyberattacks on Real Targets During Security Evaluation TestsConfirmedSecurity and cyberattacksasahi.comitmedia.co.jpJul 2026GitHub Agentic Workflows Vulnerable to Prompt Injection, Leaking Private RepositoriesWell documentedSecurity and cyberattacksSiliconANGLEDark ReadingIT Security News - cybersecurity, infosecurity news+6Jul 2026Student Discovers AI Agent Attacking GitHub Repository Supply ChainConfirmedSecurity and cyberattacksReutersEconomic TimesNDTV+1Jun 2026Wiz Red Agent Exploited GitHub Actions Vulnerability in Snowflake RepositoryConfirmedSecurity and cyberattacksForbesTheRegister.comThe Next Web+1Jun 2026Mastra AI Framework npm Packages Compromised in Supply Chain AttackConfirmedSecurity and cyberattacksDataBreachTodayJun 2026Miasma worm compromises 73 Microsoft GitHub repositories via AI code editorsConfirmedSecurity and cyberattacksThe Next Weblibrered.netWWWhat's newApr 2026AI-assisted discovery of critical GitHub RCE vulnerability in git infrastructureConfirmedSecurity and cyberattacksThe VergeWebProNewsApr 2026Unauthorized AI Skill Package Mimics Deceased Chinese Career Advisor Zhang XuefengReportedIntellectual property and appropriation21jingji.comMar 2026Anthropic Claude Code source code leaked via source map in npm packageReportedIntellectual property and appropriationitmedia.co.jpMar 2026Anthropic's Claude Code source code accidentally leaked on GitHubConfirmedIntellectual property and appropriationbusinessinsider.jpMar 2026Hackers use leaked Claude Code to distribute credential-stealing malwareReportedSecurity and cyberattackscybersecuritynews.comtechradar.comMar 2026GitHub Copilot inserts unsolicited product promotions into pull requestsConfirmedHarmful and abusive contentGIGAZINEMar 2026AI-assisted coding leaks secrets at double baseline rate on GitHubConfirmedSecurity and cyberattacksGitGuardian Blog - Take Control of Your Secrets SecurityMarkets InsiderSC Media+1Feb 2026AI-generated code causes burnout in open source projectsConfirmedReliability and hallucination็…Ž่›‹Sep 2025Code assistants exploited for backdoor injection via indirect prompt injectionReportedSecurity and cyberattacksUnit42IT Security News - cybersecurity, infosecurity newsAug 2025GitHub Copilot Chat vulnerability allows code exfiltration via prompt injectionConfirmedSecurity and cyberattacksSecurity BoulevardDark ReadingDataBreachToday+2Feb 2025Microsoft Copilot Exposes Private GitHub Data and Enables Illegal Windows ActivationWell documentedPrivacy and surveillanceIT BOLTWISEยฎ x Artificial IntelligenceTeknรณfiloesdelatino.com+4Dec 2024Ultralytics YOLO AI model compromised with cryptomining malware in supply chain attackConfirmedSecurity and cyberattacksTechTargetTechRadar