"A new automated campaign named 'Megalodon' has pushed malicious commits to over 5,500 GitHub repositories. The malware steals cloud provider credentials (AWS, Google Cloud, Azure) and SSH keys from CI/CD pipelines. Researchers note this is a significant escalation in supply chain attacks targeting developer environments."