GoKawiil - Tech News

331.

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension (tomshardware.com)

2026-05-20 | by Etiido Uko | get VS Code Security Extension → | tags: github, teampcp, visual studio code

332.

GitHub confirms breach of 3,800 repos via malicious VSCode extension (bleepingcomputer.com)

2026-05-20 | get VSCode Security Extension → | tags: github, vscode extension, teampcp

333.

GitHub investigates internal repositories breach claimed by TeamPCP (bleepingcomputer.com)

2026-05-20 | get GitHub Security Monitoring Tool → | tags: github, teampcp, source code

334.

GitHub is investigating unauthorized access to their internal repositories (news.ycombinator.com)

2026-05-20 | get GitHub Security Guide → | tags: github, internal repositories, javascript

335.

CISA Exposes Secrets, Credentials in 'Private' Repo (darkreading.com)

2026-05-19 | get GitHub Security Monitoring Tool → | tags: cisa, github, private-repo

336.

Dumb ways for an open source project to die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

337.

Dumb Ways for an Open Source Project to Die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

338.

In stunning display of stupid, secret CISA credentials found in public GitHub repo (arstechnica.com)

2026-05-19 | get GitHub Security Badge → | tags: cisa, github, amazon web services

339.

CISA Admin Leaked AWS GovCloud Keys On Github (slashdot.org)

2026-05-19 | get AWS Security Key Kit → | tags: cisa, aws govcloud, github

340.

Cursor Cloud Agents Down (news.ycombinator.com)

2026-05-19 | get Cursor Cloud Agent Monitor → | tags: github, slack, cursor

341.

Hackers have compromised dozens of popular open source packages in an ongoing supply-chain attack (techcrunch.com)

2026-05-19 | by Lorenzo Franceschi-Bicchierai | get Open Source Security Toolkit → | tags: open source, github, alibaba

342.

Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack (techcrunch.com)

2026-05-19 | by Lorenzo Franceschi-Bicchierai | get Open Source Security Toolkit → | tags: open source, supply chain attack, github

343.

US cyber agency CISA exposed reams of passwords and cloud keys to the open web (techcrunch.com)

2026-05-19 | by Zack Whittaker | get Cybersecurity Password Vault → | tags: cisa, homeland security, github

344.

U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub (news.ycombinator.com)

2026-05-19 | get Cybersecurity Lockbox Kit → | tags: us cybersecurity agency, github, digital keys

345.

New Shai-Hulud malware wave compromises 600 npm packages (bleepingcomputer.com)

2026-05-19 | get NPM Package Security Scanner → | tags: shai-hulud, npm, @antv

346.

Fans secretly mapped 24 terabytes of Minecraft’s infamous 2b2t server, million‑square‑block archive to be shared via torrent — Intense digital archaeology project has taken years, risked player wrath (tomshardware.com)

2026-05-19 | by Mark Tyson | get Minecraft 2b2t Map Archive → | tags: minecraft, 2b2t, digital archaeology

347.

CISA Admin Leaked AWS GovCloud Keys on GitHub (news.ycombinator.com)

2026-05-19 | get AWS Security Badge → | tags: cisa, aws govcloud, github

348.

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (news.ycombinator.com)

2026-05-19 | get npm package security kit → | tags: npm, atool, mini shai-hulud

349.

‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub (gizmodo.com)

2026-05-19 | get Cybersecurity Lockbox Kit → | tags: cybersecurity, github, digital keys

350.

CISA Admin Leaked AWS GovCloud Keys on Github (krebsonsecurity.com)

2026-05-18 | get AWS Security Key Backup → | tags: cisa, aws govcloud, github

351.

The tyranny of single page apps (news.ycombinator.com)

2026-05-18 | get React Developer Tools → | tags: react, facebook, github

352.

Why Wave is my new go-to terminal app - how I use this powerful tool (zdnet.com)

2026-05-18 | by Jack Wallen | get Wave Terminal Emulator → | tags: wave, terminal, linux

353.

Show HN: Haystack – Review the PRs that need human attention (news.ycombinator.com)

2026-05-18 | get GitHub Pull Request Review Tool → | tags: haystack, pull requests, github

354.

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering (venturebeat.com)

2026-05-18 | get Cybersecurity Supply Chain Kit → | tags: supply-chain, openai, github actions

355.

We stopped AI bot spam in our GitHub repo using Git's –author flag (news.ycombinator.com)

2026-05-18 | by Matvey Kukuy | get GitHub Commit Signature Tool → | tags: github, git, open source

356.

Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom (techcrunch.com)

2026-05-18 | by Zack Whittaker | get Grafana Cloud Monitoring Tool → | tags: grafana labs, open source, github

357.

Show HN: Files.md – Open-source alternative to Obsidian (news.ycombinator.com)

2026-05-18 | get Markdown Note-taking Notebook → | tags: obsidian, files.md, markdown

358.

Show HN: Files.md – open-source alternative to Obsidian (news.ycombinator.com)

2026-05-18 | get Markdown Note-Taking Software → | tags: obsidian, files.md, markdown

359.

Grafana says stolen GitHub token let hackers steal codebase (bleepingcomputer.com)

2026-05-18 | get Grafana Security Badge → | tags: grafana, github, coinbasecartel

360.

Enthusiast crams reversed-engineered PS2 into a handheld, designs custom motherboard — bespoke "PlayStation 2 Portable" pairs modern features with original silicon (tomshardware.com)

2026-05-18 | by Hassam Nasir | get PlayStation 2 Portable Kit → | tags: playstation 2, ps2 portable, tschicki