Megalodon GitHub Attack Targets 5561 Repos with Malicious CICD Workflows

Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5718 malicious commits to 5561 GitHub repositories within a sixhour window Using throwaway accounts and forged author identities buildbot autoci cibot pipelinebot the attacker injected GitHub Actions workflows containing base64encoded bash payloads that exfiltrate CI