Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos

A six-hour malware campaign, dubbed 'Megalodon,' targeted over 5,500 GitHub repositories, injecting malicious commits containing credential-stealing payloads. The campaign, orchestrated by an unknown threat actor potentially linked to TeamPCP, leveraged compromised developer credentials to infiltrate repositories and exfiltrate sensitive data like CI/CD secrets and SSH keys. The incident highlights vulnerabilities within the software supply chain and underscores the ongoing threat of sophisticated attacks targeting developer workflows.