Frequency
9
occurrences
First Seen
May 22, 2026
Last Seen
July 19, 2026
Related Threat Clusters
-
Megalodon Campaign Infects Over 5,500 GitHub Repositories with Malware
On May 18, 2026, an automated cyber campaign named Megalodon pushed 5,718 malicious commits to 5,561 GitHub repositories within six hours. The attackers used forged identities and dummy accounts to inject malicious…
7 articles · Updated May 26, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
751 articles · Updated April 29, 2026 -
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…
149 articles · Updated May 20, 2026
Recent Intelligence Reports
- Megalodon Mass Github Repo Backdooring Ci Workflows — safedep.io · July 19, 2026
- CISA urges security teams to check for software development compromises — Ground.News · May 30, 2026
- Trusted Dev Tools Abused to Steal Code and Secrets — Gbhackers · May 29, 2026
- Megalodon Mass Github Repo Backdooring Ci Workflows — safedep.io · May 26, 2026
- Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos — Darkreading · May 26, 2026
- GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos — Csoonline · May 26, 2026
- Megalodon chums the waters in 5.5K+ GitHub repo poisonings — Theregister · May 22, 2026
- GitHub repos hijacked in massive Megalodon attack — Cybernews · May 22, 2026