Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack (opens in new tab)

More than 5,500 GitHub repositories were infected with malware in a supply chain attack that relies on automated commits, security researchers warn. The campaign, dubbed Megalodon, relies on GitHub Actions workflows containing a payload designed to steal credentials, keys, tokens, and other secrets. The workflows, SafeDep says, were injected through over 5,700 malicious commits pushed […] The post appeared first on <a href="