BleepingComputer GitHub repos bombarded by info-stealing commits masked as Dependabot

[BleepingComputer]

GitHub repos bombarded by info-stealing commits masked as Dependabot


Hackers are breaching GitHub accounts and inserting malicious code disguised as Dependabot contributions to steal authentication secrets and passwords from developers. [...]


https://www.bleepingcomputer.com/news/se...ependabot/