Reblogged by kornel ("Kornel"):
rooneymcnibnug ("RooneyMcNibNug") wrote:
"Hackers are breaching GitHub accounts and inserting malicious code disguised as Dependabot contributions to steal authentication secrets and passwords from developers." 🙃 https://www.bleepingcomputer.com/news/security/github-repos-bombarded-by-info-stealing-commits-masked-as-dependabot/