Megalodon CI/CD attack hits thousands of GitHub repos
Megalodon pushed malicious GitHub Actions workflow commits into 5,561 repositories, risking exposed CI secrets, cloud keys, SSH keys, and tokens. Review workflow changes, rotate exposed credentials, and tighten CI/CD permissions.