Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

A massive cyberattack dubbed "Megalodon" has compromised over 5,500 GitHub repositories by exploiting CI/CD workflows to inject malicious code. The attack targets the software development pipeline, allowing hackers to potentially spread malware through continuous integration and deployment systems that automatically build and release software. Security researchers are warning developers to carefully review their GitHub workflow configurations and implement stronger access controls to prevent similar supply chain attacks.