Application Security Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens. Ionut ArghireMay 25, 2026