Discover how to spot real crypto projects using GitHub, Discord and X by tracking dev activity, community signals and early social momentum.

In December, attackers managed to compromise the build process of the Ultralytics YOLO AI library on GitHub through a GitHub Actions script injection vulnerability.

The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform that’s greenlit in many enterprise networks that rely on the code repository for the software they develop.