Megalodon: An Automated Attack Poisoned 5,561 GitHub Repos in Six Hours
Axios npm Supply Chain Attack: Hijacked Maintainer Account Drops Cross-Platform RAT in 2-Hour Window
Senate Intelligence Chairman Sounds Alarm on Foreign Adversary Infiltration of Open-Source Software
Shai-Hulud 2.0: The Devastating npm Supply Chain Attack Threatening Developer Ecosystems
When GitHub Became the Battlefield: How AI-Powered Malware and Workflow Hijacking Exposed Thousands of Developer Secrets