What GitHub shipped in December 2025

Megalodon: New CI/CD Malware Spreads Across GitHub, Infecting ~5,000+ Repositories - OX Security

A new malware campaign called 'Megalodon' is spreading through GitHub’s CI/CD infrastructure via fake automated commits, infecting over 5,000 repositories. The malware steals AWS, Slack, GitHub, and o…