Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack
Episode 3 min 38s

Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

www.osintinvestigate.com

Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.

Community discussion