Megalodon campaign compromises over 5,500 GitHub repositories with malicious commits

Security researchers have uncovered a large-scale supply chain attack dubbed “Megalodon” that injected malicious GitHub Actions workflows into more than 5,500 repositories. The campaign was discovered by researchers at SafeDep, who identified 5,718 malicious commits pushed across 5,561 repositories within a roughly six-hour window on May 18, in an apparent attempt to steal secrets, credentials, … The post Megalodon campaign compromises over 5,500 GitHub repositories with malicious commits appeared first on CyberInsider.