What is GitHub?

GitHub has surpassed 200 million developers on the platform during the AI era.

“Oh, we're over 200 million now.”

Island research found a GitHub repository containing 7,600 AI skills, of which more than 800 were malicious.

“Our research found a GitHub repository with 7,600 skills. Like over 800 of them were malicious.”

Michael Leland on the malicious AI skills ecosystem found in a public GitHub repository.

“Our research found a GitHub repository with 7,600 skills. Like over 800 of them were malicious.”

GitLost. A prompt injection attack class targeting GitHub AI agents: any stranger submitting an issue with hidden commands can trigger org-wide data leaks or unauthorized actions across public and private repos.

“If an AI agent with organization-wide permissions responds to the issue, it may read these instructions and unwittingly execute them, leading to critical private data being leaked or actions being performed with elevated rights across both public and private repositories.”

Encrypted reasoning blobs leak secrets even after visible sanitization because the blobs remain intact and any smaller model in the same family can decode the hidden thoughts.

“Even if you like did some sanitization on like visible part you just removed all API keys like all passwords, but you like the encrypted blobs are still there. I can like download it from the GitHub and I can decode them and I can see like what the password that what model was thinking about.”

Microsoft Work IQ context engine team is being integrated with GitHub Copilot to solve the enterprise context problem.

“That's literally what has been happening the last several months.”

GitHub Copilot compressed roughly a decade of GitHub's prior value creation into a single year by transforming coding from a tool into something more fundamental.

“What GitHub did in first I don't know 15 years of its existence or 10 years of its existence it was basically done in the last year just because coding is no longer a tool.”

GitHub distributes its CLI to non-technical employees and grants agents broad read access to internal communications as a way to democratize AI tooling inside the company.

“We've just been distributing even to the nontechnical folks the CLI and then effectively we're just giving it access to like read about everything that we're writing.”

Decoders for Anthropic's AI watermark are already publicly available on GitHub, suggesting the EU watermarking mandate may be ineffective before it is even enforced.

“There's already decoders on GitHub for it.”

GitHub is now doing more activity in a single month than it did in an entire year the prior year.

“Now we're doing more in a month than we did in a year last year.”