The Lab · Written in the open · Tagged Open Source

Lab.

Working notes from the studio. The tools I build, the workflows I keep, the mistakes I paid for.

14 entries · latest 2026-04-12

Browse every entry by topic

Latest entry

RAXXO Studios 8 min read

GitHub Got Hit With 475 Malicious PRs in 26 Hours

Attacker opened 475+ malicious PRs across GitHub in 26 hours using AI-generated payloads The campaign exploited pull_request_target workflow triggers in GitHub Actions Wiz tracked 6 attack waves starting March 11, with at least 2 npm packages compromised Malicious code hid...

CI/CDDevelopmentGitHubOpen Source
Read the entry
GitHub Got Hit With 475 Malicious PRs in 26 Hours

Latest entry · Development

All entries · Open Source