







WARNING! This is just a mirror. Find the source code at: https://gitlab.com/reclaimid/client - reclaimID/client
Investigating unauthorized access to GitHub-owned repositories
If any impact is discovered, customers will be notified via established incident response and notification channels.

unternet-co/client
Contribute to unternet-co/client development by creating an account on GitHub.
Support ActivityPub for GitLab (#11247) · Epics · GitLab.org · GitLab
Gitlab/ActivityPub Design Documents by @oelmekki
GitHub MCP Exploited: Accessing private repositories via MCP
We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.

GitchatSH/gitchat_extension
Contribute to GitchatSH/gitchat_extension development by creating an account on GitHub.
Incident Report: Leaked GitHub Personal Access Token - The Python Package Index Blog
We responded to an incident related to a leaked GitHub Personal Access Token for a PyPI administrator.


A GitHub Issue Title Compromised 4,000 Developer Machines
A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.

Repo Birthday 🎂
Login with GitHub — we only read public repos but we need your permission to query on our behalf.
Ditching GitHub
This is going to be some sort of a public service announcement, withside notes. This has been brewing for a long, long time (years), it’sjust that I never se...

GitHub - giuliocorsi/twitter-amplification-eval
Contribute to giuliocorsi/twitter-amplification-eval development by creating an account on GitHub.
Agent CI — Run GitHub Actions Locally
Caching in ~0 ms. Pause on failure. Let your AI agent fix it and retry — without pushing.
