GitHub Developers Hit in Complex Supply Chain Cyberattack

The attacker employed various techniques, including distributing malicious dependencies via a fake Python infrastructure linked to GitHub projects.

https://www.darkreading.com/application-security/github-developers-hit-in-complex-supply-chain-cyberattack