Researchers say the campaign abused compromised access tokens and deploy keys to inject malicious GitHub Actions workflows ...
The Megalodon supply chain attack poisoned over 5,500 GitHub repositories via automated commits injecting GitHub Actions workflows.
Hosted on MSN
A single 'git push' could hijack millions of GitHub repositories — and nobody knew for weeks
Sometime in early 2026, a flaw hiding inside one of the most routine actions in software development went live on the world’s largest code-hosting platform. Every time a developer ran git push to send ...
Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.
A TeamPCP copycat was just spotted hitting thousands of GitHub repos with an infostealer.
On the night of May 22, 2026, an unidentified attacker with push access to the Laravel-Lang GitHub organization rewrote every existing version tag across four widely used PHP localization packages — ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results