A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and ...
A major cyber scare has hit GitHub, with hackers from TeamPCP claiming they accessed nearly 4,000 private repositories, including internal source code.
Update, July 22, 2025: This story, originally published on July 20, has been updated with an expert counterpoint to the idea that it’s the delivery mechanism being what’s important in the latest ...