News related to
GitHub

Google has continued to expand the reach and capabilities of Copybara, its open-source tool designed to automate code migration and synchronisation across repositories, positioning it as a critical utility for organisations grappling with large, distributed codebases and complex development workflows. Originating from the company’s own need to manage code movement out of its vast internal monorepo, Copybara has evolved into a mature project used well beyond its […]

A coordinated cyber campaign using artificial intelligence to disguise malicious code is targeting researchers, developers and security professionals by exploiting trust in GitHub repositories, raising concerns about the resilience of open-source supply chains relied upon across academia and industry. Security analysts have identified a network of polished repositories seeded with a previously undocumented backdoor, dubbed PyStoreRAT, which is being distributed through reactivated GitHub accounts that had lain […]

Microsoft has officially opened the source code of the original Zork trilogy—Zork I, Zork II and Zork III—making the foundational text-adventure games freely available under the MIT licence. The company’s Open Source Programs Office, working alongside its Xbox and Activision divisions, announced that the historic repositories now include source code, build notes, comments and documentation intended to support study, teaching and development. The release does not grant […]

A sophisticated phishing campaign has enabled attackers to compromise a maintainer account within the npm ecosystem, triggering one of the largest software-supply-chain breaches recorded. On 8 September 2025 the attacker gained access to the account of developer Josh Junon, and proceeded to publish malicious updates to widely used packages including “chalk” and “debug”. The versions laced with crypto-theft malware reached libraries that collectively recorded over 2 billion […]

The multimedia framework FFmpeg has been awarded a $100,000 grant by the FLOSS/fund initiative, marking a significant injection of resources into a project that underpins video and audio processing worldwide. The grant is part of the organisation’s second tranche for 2025, delivered by FLOSS/fund—a programme launched by the brokerage firm Zerodha to bolster Free and Open Source Software projects globally.

FFmpeg, which is instrumental in powering platforms from online streaming services to editing suites, has long faced sustainability challenges despite its ubiquity in digital infrastructure. The project’s official handle confirmed receipt of the donation, describing it as “a step forward to a sustainable future for Open Source Software.” Meanwhile, FLOSS/fund’s blog revealed that the second tranche totals $675,000, bringing its total disbursement for the year to $1 million including the $325,000 committed earlier. Among the recipients alongside FFmpeg are notable projects such as Blender, OpenStreetMap and Wireshark.

The decision signals a wider trend in which tech-sovereignty and infrastructure resilience are being framed as strategic priorities. In its anniversary post, FLOSS/fund’s leadership emphasised that the typology of “Mutual Assured Sustenance” will—unlike traditional arms-race logic—apply in software ecosystems: interdependence rather than deterrence. With this context, the fund sees itself as a “global initiative with Indian roots”, citing India’s growing role in open source ecosystems.

Behind the scenes, the mechanics of funding remain complex. The blog post acknowledged that although the full amount has been committed, only $195,000 of the first tranche has been disbursed due to cross-border regulatory and tax paperwork. The timetable from announcement to actual transfer spans four to sixteen weeks, driven by varying jurisdictional requirements. The fund is working on a partnership with GitHub Sponsors to simplify payment flows.

The selection process for recipients is also non-traditional: rather than a formal application, projects publish a “funding. json” manifest detailing their finances and needs. The fund curators review the open-directory listings and pick recipients based on criteria such as “critical technical infrastructure”, adoption, and uniqueness of the project. It noted that diversity of projects—from developer libraries to humanitarian-tech tools—makes comparison difficult but unavoidable.

FFmpeg now joins a cohort of 29 projects selected in this tranche. The fund’s leadership stated that the grant does not “solve the funding problems behind FFmpeg and open source in general”, but underlined its symbolic and practical value. Analysts note that while a single donation will not fundamentally shift open-source economics, the move may prompt other large-scale users of open-source components to follow suit.

Industry observers credit the decision in part to shifting attitudes within the enterprise and government sectors. As digital dependency deepens, the risk of under-funded foundational tools becomes more visible. FLOSS/fund’s commentary suggested that countries such as India would benefit from a sovereign open-source fund administered in collaboration with the community—a concept that remains aspirational but gaining traction.

Corporations that derive value from open-source software may face increasing moral and strategic pressure to contribute back. Zerodha founder Nithin Kamath has publicly stated that “without open source software, there would be no Zerodha” and that supporting open-source infrastructure is in the best interests of both companies and states. That statement underscores the larger narrative at work: that critical digital infrastructure must be supported not just by users, but by the ecosystem as a whole.

NordVPN has released the full source code for its Linux graphical user interface and reversed its earlier decision to discontinue its Meshnet feature—moves that mark a shift in strategy toward openness and community engagement. The VPN provider published the GUI code under an open-source licence and made it available on GitHub, complete with build instructions. At the same time, it announced that Meshnet, once slated for shutdown […]

A new wave of supply-chain assaults has seen North Korean hackers publish more than 300 malicious npm packages, infecting developer systems with sophisticated malware that steals credentials and crypto assets. The campaign, known as “Contagious Interview,” exploits the trust developers place in open-source tools by cloaking malware inside packages mimicking legitimate ones.

The Socket Threat Research Team disclosed that attackers uploaded 338 malicious npm modules, collectively downloaded over 50,000 times, many featuring a newly observed loader named XORIndex. About 27 of them remain active in the npm registry. Within those packages, XORIndex collects host metadata and downloads a second-stage payload, BeaverTail, which in turn leverages a backdoor called InvisibleFerret to maintain persistence and exfiltrate data. This expansion follows a preceding June surge of 35 malicious modules using a HexEval loader.

Researchers emphasise that Contagious Interview is not a static campaign but a dynamic interplay between defenders and adversaries. As packages are taken down, attackers quickly reissue variants under fresh aliases or change loader techniques. The latest 67-package load pushed last month illustrates this cat-and-mouse escalation: the new modules alone exceeded 17,000 downloads. Attackers have mixed XORIndex and HexEval in parallel deployments, suggesting modular development and adaptability.

The campaign’s social engineering backbone remains key. Actors pose as recruiters or HR contacts on platforms like LinkedIn, targeting software engineers or job-seekers. They offer interview assignments that require cloning a GitHub or Bitbucket repository, with the malicious npm module embedded deep in the project. Because many developers run these projects outside sandboxed environments, the malicious loader quietly executes and bridges the gap to full system compromise.

Analysts attribute Contagious Interview to DPRK-aligned threat groups tracked under names such as CL-STA-0240, DeceptiveDevelopment, Tenacious Pungsan and Void Dokkaebi. The methodology aligns with patterns shown by the Lazarus Group and its affiliates, as attackers continue to weaponise open source ecosystems for espionage and financial theft. XorIndex and HexEval share infrastructure and tactics, including encrypted communication with command-and-control servers. In several cases, submitters of the malicious packages have crafted repository names containing “interview,” reflecting the campaign motif.

Beyond npm, the campaign’s reach extends: some modules reference Bitbucket repositories, and similar tactics have appeared in PyPI package attacks. The broader goal appears dual: accessing developer environments to steal intellectual property or credentials and siphoning cryptocurrencies from wallets detected on compromised machines.

Security firms and registry maintainers have responded with takedown requests and account suspensions. Socket reported removing six live HexEval-based modules earlier this year, and the npm security team has collaborated to suspend associated accounts. But defenders admit the reactive posture is fragile; attack waves resurface within hours.

Advertisements

Security analysts have uncovered a large-scale phishing operation utilising 175 npm packages as infrastructure to redirect victims to credential-harvesting sites. The packages, collectively downloaded over 26,000 times, do not themselves execute malware; rather, they act as hosting points for malicious scripts delivered through npm’s public registry and the unpkg CDN. The campaign, dubbed Beamglea, is believed to have targeted more than 135 companies across industrial, technology and […]

Xogot has extended its reach: the full Godot engine can now run natively on iPhone, allowing developers to build, edit, test and export games entirely from their pocket. Xogot, developed by Xibbon Inc., launched for iPad earlier in 2025, and its iPhone version is built upon Godot 4.4 with a rewritten user interface in SwiftUI, tailored for touch and smaller screens. The app supports both 2D and […]

openSUSE Project has rolled out the beta of Leap 16, marking a substantial shift in its Linux distribution strategy by extending community support to 24 months and introducing core architectural changes. The transition signals a deliberate move toward modernization and longer-term stability for users. Leap 16’s codebase is now aligned with SUSE Linux Enterprise 16 and built atop the SUSE Linux Framework One. The beta ships with […]

GitHub’s decision to remove the ability to sort code search results by index date has triggered an outpouring of frustration from developers who argue that the change has undermined one of the platform’s most practical tools. The feature, known as “sort:indexed,” allowed users to filter code by the time it was last indexed, providing a reliable way to find fresh and relevant examples. Its absence has left […]

Readest delivers a feature-rich eBook reader experience that works on Linux, Windows, macOS, iOS, Android and via the Web, emphasising a seamless, immersive interface for avid readers. Developed as an open-source revival of Foliate, Readest is built using Next. js and Tauri to offer consistent performance across devices. It supports a wide array of formats including EPUB, MOBI, AZW3, FB2 and CBZ; PDF support is marked as […]

SUSE has rolled out Agama 17, the next-generation installer set to accompany SUSE Linux Enterprise 16.0, bringing a raft of improvements to storage configuration, security module options, network setup and unattended installs. The upgrade overhauls how wired interfaces are presented in the UI, especially when multiple devices share the same connection. Users now see clearer distinctions and can manage such setups more intuitively. The storage section has […]

Microsoft has revealed Visual Studio 2026 Insiders, a major update to its flagship integrated development environment that weaves artificial intelligence into core workflows, boosts performance, and delivers a modernised user interface. The rollout introduces new features and channels aimed at enhancing developer productivity and addressing long-standing feedback. Visual Studio 2026 integrates GitHub Copilot across the IDE to understand the coding context, make suggestions, and automate repetitive tasks. […]

Microsoft has released the source code for its 6502-based BASIC interpreter—BASIC for 6502 Microprocessor Version 1.1—under the MIT licence, inviting developers, historians and retro-enthusiasts to explore one of the earliest instances of personal computer software. The 6,955 lines of assembly code, originally written by Bill Gates and Ric Weiland in 1976 and later refined in 1978 with garbage-collector fixes by John Feagans and Gates, can now be […]

Security investigators uncovered a sweeping campaign named GhostAction supply chain campaign that compromised 327 GitHub user accounts across 817 repositories on 5 September 2025. Attackers inserted deceptive workflow files, disguised as security enhancements, into projects—including the open-source FastUUID library—extracting and exfiltrating 3,325 secrets such as PyPI, npm and DockerHub tokens to an external server. The campaign began when GitGuardian noted a suspicious commit on 2 September by […]

DocumentDB is now officially hosted by the Linux Foundation, transitioning to a vendor-neutral model that promises to shape the future of document-based NoSQL technologies. Microsoft‑developed and built on PostgreSQL, the database has garnered substantial interest, earning nearly 2,000 GitHub stars and drawing contributions from a broad developer community since its debut in early 2025. The Linux Foundation’s governance will secure open‑source stewardship and foster collaboration across the […]

The Chromium browser has rolled out native High Dynamic Range support for Linux users running Wayland sessions, marking a significant step forward for Linux-based systems. This long-awaited feature brings an enhanced visual experience, making it easier for users to enjoy vivid colours and improved contrast across supported websites and applications. Historically, Wayland, the modern display server protocol for Linux, has faced challenges when it comes to supporting […]

  LibreOffice now supports AI-driven image generation via a new extension that bridges the office suite with the Stable Diffusion system, enabling users to create visuals directly from textual descriptions without leaving the application. A compact, purpose-built introduction prompts users to describe a scene, then uses Stable Horde, a collaborative network of volunteer-run Stable Diffusion servers, to generate an image. This functionality allows immediate integration of visuals […]

A growing cybersecurity concern has surfaced following an attack targeting job seekers in the tech industry. The attack leverages a malicious npm package disguised as a legitimate recruitment tool, warning security experts about the increasing vulnerability within the development community. The incident began when a self-identified Ukrainian Web3 team allegedly recruited a community member through a job interview. During the interview process, the candidate was instructed to […]

AI integration in office software has become a pivotal development for enhancing productivity and efficiency across businesses worldwide. Leading the charge in this transformation is ONLYOFFICE, a popular document editing platform, which has recently integrated an AI agent designed to streamline writing, editing, and collaborative work processes. This tool promises to revolutionise the way employees and teams operate, offering speedier workflows and a more intuitive user experience. […]

A sophisticated cyber‑espionage campaign has targeted a government‑affiliated IT department in Southern Africa, with indicators pointing to the China‑linked APT41 group. Kaspersky’s Managed Detection and Response team detected the intrusion via unusual activity on multiple workstations, prompting an in‑depth investigation and attribution to APT41 with high confidence. The attackers infiltrated the network by exploiting a publicly exposed web server, carrying out registry dumping to harvest credentials for […]

AWS has rolled out Kiro, an AI‑powered integrated development environment currently in preview, with features aimed at surpassing “vibe coding” tools like Cursor. The platform shifts the coding paradigm by structuring prompts into full project specifications, design blueprints, task lists and tests, helping developers move from prototype to production with consistency and speed. At the heart of Kiro is its spec‑driven development approach: when developers initiate a […]

Meta Platforms’ chief executive, Mark Zuckerberg, has announced a staggering commitment: the firm will dedicate hundreds of billions of dollars to construct multiple gigawatt‑scale data centres aimed at advancing superintelligent AI. The first of these massive hubs, named Prometheus, is slated to become operational in 2026, followed by Hyperion, which is expected to scale up to 5 GW in power consumption in the years ahead. These clusters are […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA