--- title: "Megalodon chums the waters in 5.5K+ GitHub repo poisonings" url: https://daily.dev/posts/megalodon-chums-the-waters-in-5-5k-github-repo-poisonings-34nwep7er source_url: https://www.theregister.com/security/2026/05/22/megalodon-chums-the-waters-in-55k-github-repo-poisonings/5245342 type: article source: "The Register" published: 2026-05-22T18:59:13.500Z updated: 2026-05-22T18:59:39.923Z tags: ["cyber", "github", "cicd", "malware"] reading_time: 5 upvotes: 41 comments: 1 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Megalodon chums the waters in 5.5K+ GitHub repo poisonings **[The Register](https://daily.dev/sources/theregister)** · 5 min read · 41 upvotes · 1 comments ## Summary A threat actor dubbed 'Megalodon' has poisoned over 5,500 GitHub repositories in a supply chain attack campaign. The operation targets developers and CI/CD pipelines by injecting malicious code into public repositories, posing significant risks to anyone cloning or depending on affected projects. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@mavros\_lykos** · 1 upvotes > As I thought.. It's NPM again.... ! ## Similar posts on daily.dev - [GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos](https://daily.dev/posts/github-actions-abused-by-megalodon-attack-to-slip-malicious-commits-into-5-500-repos-iymmmkb5w) · CSO Online · 3 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#github](https://daily.dev/tags/github), [#cicd](https://daily.dev/tags/cicd), [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/megalodon-chums-the-waters-in-5-5k-github-repo-poisonings-34nwep7er)