GitHub rejected two formal vulnerability reports identifying design flaws that researchers say are enabling variants of the Shai-Hulud supply-chain worm to infect and compromise hundreds of software packages and developer accounts worldwide.
First seen on therecord.media
Jump to article: therecord.media/github-dismissed-reports-shai-hulud-deep-specter
