🧰 GitHub repositories

The items that name it 4

• Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Blog | Endor Labs
  writeup2026-09-11

  More than 26,000 repositories with leaked credentials identified via GitHub search; GitHub identified over 27,000 infected packages

• How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign
  writeup2026-08-13

  Private repositories cloned en masse, potentially exposing cloud credentials, SaaS tokens, private keys, PII/PHI, and other sensitive data

• Socket: Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping
  article2026-07-17

  Tens of thousands of GitHub repositories had secrets exposed by the Shai-Hulud campaign.

• Open Source Malware Podcast — episodes
  other2026-05-22It is written here as GitHub repositories (Microsoft).

  73 Microsoft GitHub repos disabled in 105 seconds by Miasma worm, affecting four orgs including Azure Functions, breaking CI jobs