Category: GitHub Ecosystem

Security researchers have uncovered a highly sophisticated phishing campaign exploiting GitHub’s legitimate notification system to target developers worldwide. The attack, which disguises itself as an official “GitHub x Gitcoin Developer Fund 2025” announcement, has already compromised 500+ developer accounts and affected more than 200 open-source repositories. According to experts, the attackers are abusing GitHub Apps…