Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

A sophisticated supply chain attack, dubbed Megalodon, has infected over 5,500 GitHub repositories by injecting malicious code into automated workflows. The attack leverages compromised versions of the Tiledesk package to steal sensitive credentials and secrets from developer environments. This incident highlights the growing risk of supply chain attacks and the need for improved vetting processes within open-source platforms.