Megalodon: Mass GitHub Repo Backdooring via CI Workflows

A massive, automated supply chain attack dubbed "megalodon" stealthily backdoored over 5,500 GitHub repositories by injecting malicious CI workflows that exfiltrate secrets, cloud credentials, and tokens—often lying dormant until remotely triggered—posing severe risks to both open source projects and downstream package ecosystems.