Security researchers say 5,500 GitHub repositories have been affected by the attack.
Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.
A TeamPCP copycat was just spotted hitting thousands of GitHub repos with an infostealer.