Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos

A fast-moving malware campaign dubbed “Megalodon” pushed thousands of malicious commits to GitHub — compromising over 5,500 repositories in roughly six hours to harvest credentials, developer secrets and other sensitive artifacts. The activity heightens software supply-chain and CI/CD risk (stolen tokens/secrets can be reused to access cloud services, internal repos and build pipelines). Related reporting also highlights other large-scale repo incidents (GitHub breach, TeamPCP attribution) and an Exchange zero-day (CVE-2026-42897) in the same timeframe, underscoring elevated attacker activity;