SafeDep researchers uncovered Megalodon, a TeamPCP‑inspired campaign infecting over 5,500 GitHub repositories with an ...
The Megalodon supply chain attack poisoned over 5,500 GitHub repositories via automated commits injecting GitHub Actions workflows.
Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.
Security researchers say 5,500 GitHub repositories have been affected by the attack.
A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
A malware-spreading scumbag swimming through GitHub pushed malicious commits to more than 5,500 repositories on Monday as ...
GitHub projects have been targeted with malicious commits and pull requests, in an attempt to inject backdoors into these projects. Most recently, the GitHub repository of Exo Labs, an AI and machine ...
Community driven content discussing all aspects of software development from DevOps to design patterns. When you amend a Git commit, this removes the old commit from your branch’s history, and a brand ...