The Register features an exclusive investigation by Radware researchers Gabi Nakibly and Zvika Babo into a coordinated supply-chain attack campaign targeting 61 public GitHub repositories. The researchers identified 83 attacks designed to exploit vulnerable development workflows, potentially exposing credentials and access tokens. The findings highlight emerging risks to open-source software ecosystems and the growing sophistication of supply-chain threats.
The Register