Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack. On infected machines, malware would exfiltrate all SSH private keys, AWS credentials, GCP access tokens, and more.

https://www.securityweek.com/over-5500-github-repositories-infected-in-megalodon-supply-chain-attack/