Technology ❯ Software Development ❯ Open Source Software ❯ GitHub
Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.