Megalodon

Researchers Yossi Weizman of Microsoft and Mor Weinberger of Echo presented at Black Hat USA 2026 a new open-source tool, 'GitHub Threat Detector,' that uses GitHub's own event stream to detect supply…

Attackers are increasingly targeting developer endpoints to steal credentials, as demonstrated by supply chain attacks like Megalodon, TrapDoor, and Miasma. GitGuardian's new Developer Endpoint Protec…

A campaign named "Megalodon" has been poisoning over 5,500 GitHub repositories by flooding them with malicious commits and spam. The attack aims to distribute malware and compromise developer systems …