8 min read
GitHub Got Hit With 475 Malicious PRs in 26 Hours
Attacker opened 475+ malicious PRs across GitHub in 26 hours using AI-generated payloads
The Lab · Written in the open · Tagged CI/CD
Working notes from the studio. The tools I build, the workflows I keep, the mistakes I paid for.
2 entries · latest 2026-06-11
Latest entry
Claude Code -p runs headless in CI with zero terminal Blog generation, daily audit, PR triage, release notes, README sync all on cron Each run costs 0.10 to 0.60 EUR depending on context size Pin the CLI version and cache...
Read the entry
Latest entry · Tutorials
All entries · CI/CD
8 min read
Attacker opened 475+ malicious PRs across GitHub in 26 hours using AI-generated payloads