Malware

Megalodon campaign poisons over 5,500 GitHub repositories

May 22, 2026 1 min read 7 views
cybersecurity news
An automated campaign dubbed Megalodon injected malicious commits into 5,561 GitHub repositories to steal CI/CD credentials, cloud access tokens, and SSH keys.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo