Public posts with this hashtag.
Teach Copilot about your repo: set up the Copilot app, provide context with README and code examples, configure settings, and refine prompts for more accurate suggestions. #GitHub #Copilot
The GitHub BlogGitHub Copilot app for Beginners: How to teach Copilot about your codebaseLearn how to add custom instructions and skills to your repository, use custom agents, and connect MCP servers like Playwright.
This isn't remotely funny. The research was posted yesterday:
Pillar Security: Open and Shut: Remote Code Execution in opencode via MCP OAuth https://www.pillar.security/blog/open-and-shut-remote-code-execution-in-opencode-via-mcp-oauth
More:
Infosecurity-Magazine: Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk https://www.infosecurity-magazine.com/news/opencode-quietly-patched-critical/ #infosec #vulnerability #bots #GitHub
www.pillar.securityOpen and Shut: Remote Code Execution in opencode via MCP OAuthPillar Security found a critical remote code execution flaw in opencode on Windows and WSL. A remote MCP server could run code on your machine during the OAuth handshake. Affected 1.0.137 to 1.18.32, fixed in 1.18.33, no CVE issued.
Hackers Hijacked 1,900 GitHub Accounts—Then They Went After 30,000 Repos, by (not found or attributed):
An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.
#OVHcloud #SupplyChainAttack #GitHub #CLI #SecretsTheft #DevSecOps #Cloud #Cybersecurity
🔧 BUILD // GitHub Trending — 2026-10-20
Another "long term memory" repo, which means a SQLite file and a prompt template wearing a trenchcoat, but at least this one's in Rust so it'll fail fast instead of fail slow.
⭐ 666 stars today · Rust
🔗 https://github.com/akitaonrails/ai-memory
My new article-shared with the warmest thanks and heartfelt sentiments! Thank you to everyone who played a part in my return to the GitHub platform https://dev.to/toxy4ny/back-on-github-and-grateful-thank-you-cassidy-4gmn #github #bluesky #community #help #back #again #restore #news #toxy4ny #KL3FT3Z #defcon #social
DEV CommunityBack on GitHub, and Grateful: Thank You, Cassidy ❤️My GitHub account has been restored. I’ve been looking forward to being able to write that sentence....
🤖 GhostAction evolves: after planting malicious GitHub Actions workflows, the crew now phishes open-source maintainers and hides an infostealer in a fake font file. OpenSourceMalware ties it to 94 compromised repos. Check your CI configs and recent deps.
🔗 https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html
#CyberSec #Malware #SupplyChain #GitHub
The Hacker NewsGhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesGhostAction operators add GitHub-themed phishing and a VS Code-triggered stealer to compromised repositories, with 94 carrying the second stage.
