· 5 days ago· SecurityWeek
Megalodon Malware Targets Over 5,500 GitHub Repositories in Devastating Supply Chain Hit
Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens. The post Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack appeared first on SecurityWeek.
#supply-chain-attacks#github-security#malware#credentials-theft#cybersecurity