SafeDep

The Latest

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds

Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds

Europol Seizes First VPN Used by Ransomware Gangs, Arrests Administrator

Europol Seizes First VPN Used by Ransomware Gangs, Arrests Administrator

Android Malware Spotted Subscribing Victims to Paid Services Without Consent

Android Malware Spotted Subscribing Victims to Paid Services Without Consent

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

Read More

2 minute read

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

May 22, 2026