URL has been copied successfully!
5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours


Tags: , , , , ,

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

First seen on hackread.com

Jump to article: hackread.com/github-repositories-megalodon-supply-chain-attack/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Trivy vulnerability scanner backdoored with credential stealer in supply chain attack
  2. PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials
  3. Q1 2026 Open Source Malware Index: Adaptive Attacks, Familiar Weaknesses
  4. Mistral AI SDK, TanStack Router hit in npm software supply chain attack