More than 5,500 GitHub repositories were infected with malware in a supply chain attack, dubbed Megalodon, on May 18 that relies on automated commits SecurityWeek 2026-05-26 Ionut Arghire Megalodon Related Coverage Megalodon Supply Chain Attack Hits 5,500+ GitHub Repositories in Six Hours The Cyber Express · Ashish Khaitan Megalodon campaign compromises over 5,500 GitHub repositories with malicious commits CyberInsider · Bill Mann Automated ‘Megalodon’ Campaign Spreads GitHub Repo Backdoors DataBreachToday.com · Mathew J. Schwartz GitHub hit with another major attack — Megalodon hits over 5,000 repos with malware-laden commits TechRadar · Sead Fadilpašić Megalodon cyberattack infects 5,500 GitHub open-source repositories with malware, researchers say Mashable · Timothy Beck Werth