From the notebook

github.

2 notes on this topic.

The GitHub security team responded to a critical vulnerability by closing the ticket

OrchidFiles reported a flaw that let anyone read private repo secrets. GitHub marked it duplicate, did not patch it, then banned the researcher.

Someone found 10,000 GitHub repositories distributing malware disguised as cracked software and game cheats. The scale is wild.