Researcher's Notebook: Hunting Megalodon Fossils

The "megalodon" supply chain attack leveraged malicious GitHub Actions and a NEXUS Listener C2 infrastructure to steal credentials and deploy cryptominers, with retrohunting techniques revealing its connection to earlier, related campaigns targeting trusted CI pipelines.