Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

https://www.osintinvestigate.com Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.