The popular code hosting platform GitHub has announced that it require all contributors to secure their accounts with two-factor authentication by the end of 2023.

Today, the Microsoft-owned company says, only 16.5% of active GitHub users and 6.44% of npm users use 2FA. That is not a lot, and frankly fewer than I would have expected.

Hackers compromised Toptal's GitHub organization account and used their access to publish ten malicious packages on the Node ...

Malicious code lurking in over 5,000 downloads, says Socket researcher Developer freelancing platform Toptal has been ...

Think passkeys make you phishing-proof? Think again. Attackers are using downgrade attacks, device-code phishing, and OAuth ...

It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with ...

GitHub is set to require two-factor authentication (2FA) for all developers who contribute code to any project on the platform, a move designed to bolster the software supply chain. The Microsoft ...